CVE-2019-5094 Memory corruption in E2fsprogs
A specially crafted ext4 partition triggers an out-of-bounds heap write in E2fsprogs, allowing attackers to execute arbitrary code.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-5094?
CVE-2019-5094 is a high-severity memory corruption vulnerability in Canonical Ubuntu Linux, published on 24 Sep 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Weakness: CWE-787
Which versions are affected by CVE-2019-5094?
It affects 6 products.
Linux distribution packages (6)
e2fsprogs SUSE:Linux Enterprise Desktop 12 SP4 | All versions | 1.43.8-3.8.1 |
e2fsprogs SUSE:Linux Enterprise Module for Basesystem 15 | All versions | 1.43.8-4.11.1 |
e2fsprogs SUSE:Linux Enterprise Module for Basesystem 15 SP1 | All versions | 1.43.8-4.11.1 |
e2fsprogs SUSE:Linux Enterprise Server 12 SP4 | All versions | 1.43.8-3.8.1 |
e2fsprogs SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | All versions | 1.43.8-3.8.1 |
e2fsprogs SUSE:Linux Enterprise Software Development Kit 12 SP4 | All versions | 1.43.8-3.8.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, E2fsprogs Project E2fsprogs, Fedoraproject Fedora, Netapp Hci Management Node, Netapp Solidfire.
How do I fix CVE-2019-5094?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-5094 being exploited?
There is no known exploitation of CVE-2019-5094 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2019-5094, CLEANSTART-2024-NP33069, DEBIAN-CVE-2019-5094, DLA-1935-1, DSA-4535-1, GHSA-3498-94v2-7qqw and 6 more.