Description
Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | e2fsprogs | 1.40.3-1 | — |
| Debian 13 | e2fsprogs | 1.40.3-1 | — |
| Debian 12 | e2fsprogs | 1.40.3-1 | — |
| Debian 5.0 | e2fsprogs | 1.40.2-1+lenny1 | DTSA-95-1 |
| Debian 4.0 | e2fsprogs | 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 | DSA-1422-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | e2fsprogs +2 | 1.39-10.el5_1.1 | RHSA-2008:0003 |
| RHEL 4 | e2fsprogs +1 | 1.35-12.11.el4_6.1 | RHSA-2008:0003 |
| RHEL 3 | e2fsprogs +1 | 1.32-15.4 | RHSA-2008:0003 |
| RHEL 2 | e2fsprogs +1 | 1.26-1.73 | RHSA-2008:0003 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | e2fsprogs | 1.46.4-1.1 | openSUSE-SU-2024:10731-1 |
Advisories 4
- RHSA-2008:0003 Red Hat Security Advisory: e2fsprogs security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DTSA-95-1 e2fsprogs - multiple integer overflows Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1422-1 e2fsprogs - arbitrary code execution Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10731-1 e2fsprogs-1.46.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 27965 third-party-advisory
- 1019537 vdb-entry
- 26772 vdb-entry
- http://www.vmware.com/security/advisories/VMSA-2008-0004.html
- 28541 third-party-advisory
- 28000 third-party-advisory
- e2fsprogs-libext2fs-integer-overflow(38903) vdb-entry
- oval:org.mitre.oval:def:10399 vdb-entry signature
- SSRT100018 vendor-advisory
- RHSA-2008:0003 vendor-advisory
- ADV-2007-4135 vdb-entry
- 20080212 FLEA-2008-0005-1 e2fsprogs mailing-list
- 28042 third-party-advisory
- 20080303 VMSA-2008-0004 Low: Updated e2fsprogs service console package mailing-list
- 29224 third-party-advisory
- FEDORA-2007-4461 vendor-advisory
- 40551 third-party-advisory
- DSA-1422 vendor-advisory
- SUSE-SR:2007:025 vendor-advisory
- 27987 third-party-advisory
- 28030 third-party-advisory
- ADV-2008-0761 vdb-entry
- http://support.citrix.com/article/CTX118766
- 27889 third-party-advisory
- 28648 third-party-advisory
- ADV-2010-1796 vdb-entry
- USN-555-1 vendor-advisory
- 28360 third-party-advisory
- http://sourceforge.net/project/shownotes.php?release_id=560230&group_id=2406
- 32774 third-party-advisory
- https://issues.rpath.com/browse/RPL-2011
- FEDORA-2007-4447 vendor-advisory
- [Security-announce] 20080303 VMSA-2008-0004 Low: Updated e2fsprogs service console package mailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2008-040.htm
- http://wiki.rpath.com/Advisories:rPSA-2007-0262
- MDKSA-2007:242 vendor-advisory