High USN-5464-1 1 CVE

e2fsprogs vulnerability

Published Jun 7, 2022 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

Nils Bars discovered that e2fsprogs incorrectly handled certain file
systems. A local attacker could use this issue with a crafted file
system image to possibly execute arbitrary code.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	e2fsprogs	1.44.1-1ubuntu1.4
Ubuntu · 20.04 LTS 20.04:LTS	e2fsprogs	1.45.5-2ubuntu1.1
Ubuntu · 22.04 LTS 22.04:LTS	e2fsprogs	1.46.5-2ubuntu1.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	e2fsprogs	1.42.9-3ubuntu1.3+esm3
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	e2fsprogs	1.42.13-1ubuntu1.2+esm1

Vulnerabilities 1

High 7.8

CVE-2022-1304

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and p…

e2fsprogs e2fsprogs e2fsprogs e2fsprogs Debian Ubuntu Azure Linux Alpine

Apr 14, 2022

References

report
https://ubuntu.com/security/CVE-2022-1304