CVE-2019-5188

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

CVSS v3.1

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0

4.4 MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

1.03% chance of exploitation in the next 30 days, 61th percentile

Published

2020-01-08

Updated

2025-05-30

Proof-of-concept exploits (1)

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0973

References

• CVE Record
• NVD entry

Related

• CVE-2019-5187
• CVE-2019-5392
• CVE-2019-5186
• CVE-2019-5413
• CVE-2019-5185
• CVE-2019-5414