High USN-4142-1 1 CVE

e2fsprogs vulnerability

Published Sep 30, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that e2fsprogs incorrectly handled certain ext4 partitions.
An attacker could possibly use this issue to execute arbitrary code.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	e2fsprogs	1.42.13-1ubuntu1.1
Ubuntu · 18.04 LTS 18.04:LTS	e2fsprogs	1.44.1-1ubuntu1.2

Vulnerabilities 1

High 7.5

CVE-2019-5094

An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially cra…

e2fsprogs e2fsprogs e2fsprogs Debian Ubuntu Alpine

Sep 24, 2019

References

report
https://ubuntu.com/security/CVE-2019-5094