CVE-2019-5094

Summary

CVE	CVE-2019-5094
State	PUBLISHED
Assigner	talos
Source Priority	CVE Program / NVD first with legacy fallback
Published	2019-09-24 22:15:13 UTC
Updated	2026-10-14 07:16:53 UTC
Description	An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Risk And Classification

Primary CVSS: v3.1 6.7 MEDIUM from [email protected]

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Problem Types: CWE-787 | CWE-787 CWE-787: Out-of-bounds Write | CWE-787 CWE-787 Out-of-bounds Write

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Secondary	6.7	MEDIUM	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
3.1	ADP	DECLARED	6.7	MEDIUM	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
3.1	[email protected]	Secondary	7.5	HIGH	`CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H`
3.1	134c704f-9b21-4f2e-91b3-4a467353bcc0	Secondary	6.7	MEDIUM	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
3.1	CNA	DECLARED	7.5	HIGH	`CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H`
2.0	[email protected]	Primary	4.6		`AV:L/AC:L/Au:N/C:P/I:P/A:P`

CVSS v3.1 Breakdown

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 Breakdown

Access Vector

Local

Access Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

AV:L/AC:L/Au:N/C:P/I:P/A:P

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Canonical	Ubuntu Linux	12.04	All	All	All
Operating System	Canonical	Ubuntu Linux	14.04	All	All	All
Operating System	Canonical	Ubuntu Linux	16.04	All	All	All
Operating System	Canonical	Ubuntu Linux	18.04	All	All	All
Operating System	Canonical	Ubuntu Linux	19.04	All	All	All
Operating System	Debian	Debian Linux	10.0	All	All	All
Operating System	Debian	Debian Linux	8.0	All	All	All
Operating System	Debian	Debian Linux	9.0	All	All	All
Application	E2fsprogs Project	E2fsprogs	All	All	All	All
Operating System	Fedoraproject	Fedora	30	All	All	All
Operating System	Fedoraproject	Fedora	31	All	All	All
Application	Netapp	Hci Management Node	-	All	All	All
Application	Netapp	Solidfire	-	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	E2fsprogs	affected E2fsprogs 1.43.3 - 1.45.3	Not specified
ADP	Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified
ADP	Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified
ADP	Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified
ADP	Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified
ADP	Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	affected V3.1.0 V3.1.5 custom	Not specified

References

Reference	Source	Link	Tags
cert-portal.siemens.com/productcert/html/ssa-398330.html	0b142b55-0307-4c5a-b3c9-f314f3fb7c5e	cert-portal.siemens.com
[SECURITY] Fedora 31 Update: e2fsprogs-1.45.5-1.fc31 - package-announce - Fedora Mailing-Lists	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org
CVE-2019-5094 E2FSProgs Vulnerability in NetApp Products \| NetApp Product Security	af854a3a-2127-422b-91ae-364da2661108	security.netapp.com	Third Party Advisory
[SECURITY] Fedora 30 Update: e2fsprogs-1.44.6-2.fc30 - package-announce - Fedora Mailing-Lists	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org
[SECURITY] [DLA 1935-1] e2fsprogs security update	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org	Mailing List, Third Party Advisory
e2fsprogs: Arbitrary code execution (GLSA 202003-05) — Gentoo security	af854a3a-2127-422b-91ae-364da2661108	security.gentoo.org	Third Party Advisory
USN-4142-1: e2fsprogs vulnerability \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
Debian -- Security Information -- DSA-4535-1 e2fsprogs	af854a3a-2127-422b-91ae-364da2661108	www.debian.org	Third Party Advisory
USN-4142-2: e2fsprogs vulnerability \| Ubuntu security notices \| Ubuntu	af854a3a-2127-422b-91ae-364da2661108	usn.ubuntu.com	Third Party Advisory
Bugtraq: [SECURITY] [DSA 4535-1] e2fsprogs security update	af854a3a-2127-422b-91ae-364da2661108	seclists.org	Mailing List, Third Party Advisory
TALOS-2019-0887 \|\| Cisco Talos Intelligence Group - Comprehensive Threat Intelligence	af854a3a-2127-422b-91ae-364da2661108	talosintelligence.com	Exploit, Third Party Advisory
[SECURITY] Fedora 30 Update: e2fsprogs-1.44.6-2.fc30 - package-announce - Fedora Mailing-Lists	MITRE	lists.fedoraproject.org
[SECURITY] Fedora 31 Update: e2fsprogs-1.45.5-1.fc31 - package-announce - Fedora Mailing-Lists	MITRE	lists.fedoraproject.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

375305 EulerOS Security Update for e2fsprogs (EulerOS-SA-2021-1290)
377536 Alibaba Cloud Linux Security Update for e2fsprogs (ALINUX2-SA-2020:0152)
500170 Alpine Linux Security Update for e2fsprogs
503905 Alpine Linux Security Update for e2fsprogs
591406 Siemens SIMATIC S7-1500 CPU GNU/Linux subsystem Multiple Vulnerabilities (SSB-439005, ICSA-22-104-13)
670299 EulerOS Security Update for e2fsprogs (EulerOS-SA-2021-1777)
671127 EulerOS Security Update for e2fsprogs (EulerOS-SA-2019-2140)
900188 CBL-Mariner Linux Security Update for e2fsprogs 1.44.6
903592 Common Base Linux Mariner (CBL-Mariner) Security Update for e2fsprogs (3724)