CVE catalog

CVE-2019-5188

e2fsprogs: CVE-2019-5188

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.08% · Oct 25, 2026

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiane2fsprogssid1.47.4-1fixed
Debiane2fsprogsforky1.47.4-1fixed
Debiane2fsprogstrixie1.47.2-3fixed
Debiane2fsprogsbookworm1.47.0-2fixed
Cpee2fsprogsNot reportedNot reportedunknown
CpefedoraNot reportedNot reportedunknown
Cpedebian_linuxNot reportedNot reportedunknown
Cpeubuntu_linuxNot reportedNot reportedunknown
CpeleapNot reportedNot reportedunknown
Cpehci_compute_node_firmwareNot reportedNot reportedunknown
Cpesolidfire\,_enterprise_sds_\&_hci_storage_nodeNot reportedNot reportedunknown
Alpinee2fsprogs3.101.45.5-r0fixed
Alpinee2fsprogs3.111.45.5-r0fixed
Alpinee2fsprogs3.121.45.5-r0fixed
Alpinee2fsprogs3.131.45.5-r0fixed
Alpinee2fsprogs3.141.45.5-r0fixed
Alpinee2fsprogs3.151.45.5-r0fixed
Alpinee2fsprogs3.161.45.5-r0fixed
Alpinee2fsprogs3.171.45.5-r0fixed
Alpinee2fsprogs3.181.45.5-r0fixed
Alpinee2fsprogs3.191.45.5-r0fixed
Alpinee2fsprogs3.201.45.5-r0fixed
Alpinee2fsprogs3.211.45.5-r0fixed
Alpinee2fsprogs3.221.45.5-r0fixed
Alpinee2fsprogs3.231.45.5-r0fixed
Alpinee2fsprogs3.241.45.5-r0fixed
Alpinee2fsprogs3.81.44.2-r2fixed
Alpinee2fsprogs3.91.44.5-r2fixed
Ubuntue2fsprogspro1.42.8-1ubuntu1vulnerable
Ubuntue2fsprogspro1.42.8-1ubuntu2vulnerable
Ubuntue2fsprogspro1.42.8-1ubuntu3vulnerable
Ubuntue2fsprogspro1.42.9-2ubuntu1vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1.2vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1.3vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1.3+esm1vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1.3+esm2fixed
Ubuntue2fsprogs16.041.42.12-1ubuntu2vulnerable
Ubuntue2fsprogs16.041.42.13-1ubuntu1vulnerable
Ubuntue2fsprogs16.041.42.13-1ubuntu1.1vulnerable
Ubuntue2fsprogs16.041.42.13-1ubuntu1.2fixed
Ubuntue2fsprogs18.041.43.5-1vulnerable
Ubuntue2fsprogs18.041.43.7-1vulnerable
Ubuntue2fsprogs18.041.43.8-1ubuntu1vulnerable
Ubuntue2fsprogs18.041.43.8-2vulnerable
Ubuntue2fsprogs18.041.43.9-1vulnerable
Ubuntue2fsprogs18.041.43.9-1ubuntu1vulnerable
Ubuntue2fsprogs18.041.43.9-2vulnerable
Ubuntue2fsprogs18.041.44.0-1vulnerable
Ubuntue2fsprogs18.041.44.1-1vulnerable
Ubuntue2fsprogs18.041.44.1-1ubuntu1vulnerable
Ubuntue2fsprogs18.041.44.1-1ubuntu1.1vulnerable
Ubuntue2fsprogs18.041.44.1-1ubuntu1.2vulnerable
Ubuntue2fsprogs18.041.44.1-1ubuntu1.3fixed
Ubuntue2fsprogspro1.42.8-1ubuntu1vulnerable
Ubuntue2fsprogspro1.42.8-1ubuntu2vulnerable
Ubuntue2fsprogspro1.42.8-1ubuntu3vulnerable
Ubuntue2fsprogspro1.42.9-2ubuntu1vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1.2vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1.3vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1.3+esm1vulnerable
Ubuntue2fsprogspro1.42.9-3ubuntu1.3+esm2fixed
Ubuntue2fsprogs16.041.42.12-1ubuntu2vulnerable
Ubuntue2fsprogs16.041.42.13-1ubuntu1vulnerable
Ubuntue2fsprogs16.041.42.13-1ubuntu1.1vulnerable
Ubuntue2fsprogs16.041.42.13-1ubuntu1.2fixed
Ubuntue2fsprogs18.041.43.5-1vulnerable
Ubuntue2fsprogs18.041.43.7-1vulnerable
Ubuntue2fsprogs18.041.43.8-1ubuntu1vulnerable
Ubuntue2fsprogs18.041.43.8-2vulnerable
Ubuntue2fsprogs18.041.43.9-1vulnerable
Ubuntue2fsprogs18.041.43.9-1ubuntu1vulnerable
Ubuntue2fsprogs18.041.43.9-2vulnerable
Ubuntue2fsprogs18.041.44.0-1vulnerable
Ubuntue2fsprogs18.041.44.1-1vulnerable
Ubuntue2fsprogs18.041.44.1-1ubuntu1vulnerable
Ubuntue2fsprogs18.041.44.1-1ubuntu1.1vulnerable
Ubuntue2fsprogs18.041.44.1-1ubuntu1.2vulnerable
Ubuntue2fsprogs18.041.44.1-1ubuntu1.3fixed
Susee2fsprogslinux enterprise module for basesystem 151.43.8-4.17.1fixed
Susee2fsprogslinux enterprise module for basesystem 15 sp11.43.8-4.17.1fixed
Susee2fsprogslinux enterprise desktop 12 sp41.43.8-3.11.1fixed
Susee2fsprogslinux enterprise software development kit 12 sp41.43.8-3.11.1fixed
Susee2fsprogslinux enterprise software development kit 12 sp51.43.8-3.11.1fixed
Susee2fsprogslinux enterprise server 12 sp41.43.8-3.11.1fixed
Susee2fsprogslinux enterprise server for sap applications 12 sp41.43.8-3.11.1fixed
Susee2fsprogslinux enterprise server 12 sp51.43.8-3.11.1fixed
Susee2fsprogslinux enterprise server for sap applications 12 sp51.43.8-3.11.1fixed
Opensusee2fsprogsleap 15.11.43.8-lp151.5.12.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiane2fsprogssourcesid1.45.5-1not yet assignedNot reported[948508]
Debiane2fsprogssourceforky1.45.5-1not yet assignedNot reported[948508]
Debiane2fsprogssourcetrixie1.45.5-1not yet assignedNot reported[948508]
Debiane2fsprogssourcebookworm1.45.5-1not yet assignedNot reported[948508]
Alpinee2fsprogsapk3.101.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.111.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.121.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.131.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.141.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.151.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.161.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.171.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.181.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.191.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.201.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.211.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.221.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.231.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.241.45.5-r0Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.81.44.2-r2Not reportedALPINE-CVE-2019-5188Not reported
Alpinee2fsprogsapk3.91.44.5-r2Not reportedALPINE-CVE-2019-5188Not reported
Ubuntue2fsprogsdebpro1.42.9-3ubuntu1.3+esm2Not reportedUSN-4249-1Not reported
Ubuntue2fsprogsdeb16.041.42.13-1ubuntu1.2Not reportedUSN-4249-1Not reported
Ubuntue2fsprogsdeb18.041.44.1-1ubuntu1.3Not reportedUSN-4249-1Not reported
Ubuntue2fsprogsdebpro1.42.9-3ubuntu1.3+esm2Not reportedUBUNTU-CVE-2019-5188Not reported
Ubuntue2fsprogsdeb16.041.42.13-1ubuntu1.2Not reportedUBUNTU-CVE-2019-5188Not reported
Ubuntue2fsprogsdeb18.041.44.1-1ubuntu1.3Not reportedUBUNTU-CVE-2019-5188Not reported
Susee2fsprogsrpmlinux enterprise module for basesystem 151.43.8-4.17.1Not reportedSUSE-SU-2020:0265-1Not reported
Susee2fsprogsrpmlinux enterprise module for basesystem 15 sp11.43.8-4.17.1Not reportedSUSE-SU-2020:0265-1Not reported
Susee2fsprogsrpmlinux enterprise desktop 12 sp41.43.8-3.11.1Not reportedSUSE-SU-2020:0360-1Not reported
Susee2fsprogsrpmlinux enterprise software development kit 12 sp41.43.8-3.11.1Not reportedSUSE-SU-2020:0360-1Not reported
Susee2fsprogsrpmlinux enterprise software development kit 12 sp51.43.8-3.11.1Not reportedSUSE-SU-2020:0360-1Not reported
Susee2fsprogsrpmlinux enterprise server 12 sp41.43.8-3.11.1Not reportedSUSE-SU-2020:0360-1Not reported
Susee2fsprogsrpmlinux enterprise server for sap applications 12 sp41.43.8-3.11.1Not reportedSUSE-SU-2020:0360-1Not reported
Susee2fsprogsrpmlinux enterprise server 12 sp51.43.8-3.11.1Not reportedSUSE-SU-2020:0360-1Not reported
Susee2fsprogsrpmlinux enterprise server for sap applications 12 sp51.43.8-3.11.1Not reportedSUSE-SU-2020:0360-1Not reported
Opensusee2fsprogsrpmleap 15.11.43.8-lp151.5.12.1Not reportedOPENSUSE-SU-2020:0166-1Not reported

[Debian bug #948508]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [comerr-dev]Fixed

    Source package: [e2fsprogs]

    Details (4)
    • 2.1-1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 2.1-1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 2.1-1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 2.1-1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • Source package: [e2fsprogs]

    Details (4)
    • 1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • [e2fsprogs]Fixed
    Details (4)
    • 1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • Source package: [e2fsprogs]

    Details (4)
    • 1.47.0-2 · all · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2 · all · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • [fuse2fs]Fixed

    Source package: [e2fsprogs]

    Details (4)
    • 1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • [fuseext2]Fixed

    Source package: [e2fsprogs]

    Details (2)
    • 1.47.2-3~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • Source package: [e2fsprogs]

    Details (4)
    • 1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • [libext2fs2]Fixed

    Source package: [e2fsprogs]

    Details (4)
    • 1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • Source package: [e2fsprogs]

    Details (4)
    • 1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • [libss2]Fixed

    Source package: [e2fsprogs]

    Details (4)
    • 1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • [logsave]Fixed

    Source package: [e2fsprogs]

    Details (4)
    • 1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

  • [ss-dev]Fixed

    Source package: [e2fsprogs]

    Details (4)
    • 2.0-1.47.0-2+b2 · amd64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 2.0-1.47.0-2+b2 · arm64 · bookworm

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 2.0-1.47.2-3~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

    • 2.0-1.47.2-3~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.45.5-1

      dsa · e2fsprogs · debian · bookworm

Observed:

References