A vulnerability in e2fsck, manifested when processing specially crafted directories.
A vulnerability (CVE-2019-5188) has been identified in the e2fsck utility included in the e2fsprogs package, which allows for remote code execution during file system checks containing specially formatted directories. The vulnerability has been confirmed in releases from 1.43.3 to 1.45.4. It has been fixed in the e2fsck 1.45.5 update. However, the issue remains unpatched in distributions such as Debian, Arch Linux, SUSE/openSUSE, Ubuntu, and RHEL. The vulnerability was caused by […]
