CVE:CVE-2019-5188
CNNVD:CNNVD-202001-218
E2fsprogs是一套用以维护ext2、ext3和ext4文件系统的工具程序集。e2fsck是其中的一个用于检查ext2/3/4文件系统完整性的程序。
E2fsprogs e2fsck 1.45.4版本中的rehash.c文件存在缓冲区错误漏洞。攻击者可利用该漏洞执行代码。
solution:Upgrade e2fsprogs_project e2fsprogs to a higher version than 1.45.4,and avoid the version [1.43.3,1.45.4]; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.04,19.10,and avoid the version 12.04,14.04,16.04,18.04,19.04,19.10; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade netapp hci_compute_node_firmware to a higher version than -; Upgrade netapp solidfire,_enterprise_sds_&_hci_storage_node to a higher version than -