ZeroDay Findings
Sign inSign up

Findings

CVE-2019-5188

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4.

Published Jan 8, 2020 · updated Oct 14, 2026 · e2fsprogs project e2fsprogs

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 8, 2020 · NIST NVD

    Detected

    A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Affected

  • cpe canonical/ubuntu linux12.04
  • cpe canonical/ubuntu linux14.04
  • cpe canonical/ubuntu linux16.04
  • cpe debian/debian linux8.0
  • cpe debian/debian linux9.0
  • cpe e2fsprogs project/e2fsprogsversion unspecified
  • cpe fedoraproject/fedora30
  • cpe fedoraproject/fedora31
  • cpe netapp/hci compute node firmwareversion unspecified
  • cpe netapp/solidfire, enterprise sds & hci storage nodeversion unspecified
  • cpe opensuse/leap15.1

Sources

  • CVE.orgVulnerability recordCVE-2019-5188

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2019-5188

    30-day exploitation probability 1.1%

    first.org
  • NIST NVDVulnerability recordCVE-2019-5188

    A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerabil

    nvd.nist.gov

References