E2fsprogs is a foundational utility suite for managing ext2/ext3/ext4 filesystems across Linux and Unix systems, with a narrow but deeply embedded footprint in storage administration and system-level tools. The observed vulnerability signal concentrates on memory-safety issues—out-of-bounds reads and writes, and buffer-boundary violations—that arise from the low-level nature of filesystem metadata parsing and manipulation, typical of C-based storage utilities. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by E2fsprogs Project over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-5094HIGH An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the h | Sep 24, 2019 | 7.5 | 25 | NO | NO |
CVE-2022-1304HIGH An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted file | Apr 14, 2022 | 7.8 | 23 | NO | NO |
CVE-2019-5188MEDIUM A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on th | Jan 8, 2020 | 6.7 | 23 | NO | NO |
CVE-2015-1572MEDIUM Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descripto | Feb 24, 2015 | 4.6 | 14 | NO | NO |
CVE-2015-0247MEDIUM Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in | Feb 17, 2015 | 4.6 | 14 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by E2fsprogs Project.
Media articles that mention a CVE ID that affects a product developed by E2fsprogs Project — matched by CVE ID, not by vendor name.