Moderate: e2fsprogs security update
Summary
ALSA-2022:8361: Moderate: e2fsprogs security update. Affects e2fsprogs versions < 1.46.5-3.el9. Fixed in 1.46.5-3.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems. These packages are commonly used in Linux distributions, including AlmaLinux. They are responsible for managing the file systems and ensuring their integrity and functionality.
Vulnerability Detail
The e2fsprogs package is affected by a moderate security vulnerability identified as CVE-2022-1304. This vulnerability allows an attacker to perform out-of-bounds read/write operations on a crafted file system. By exploiting this vulnerability, an attacker can potentially gain unauthorized access to sensitive information, modify data, or cause a denial-of-service condition. The impact of this vulnerability can vary depending on the specific usage and configuration of the affected system.
How To Fix
Minimum fixed version
1.46.5-3.el9
This is the first release that contains the fix.
sudo dnf update e2fsprogsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update as soon as possible to mitigate the risk of exploitation.
Conclusion
The e2fsprogs package in AlmaLinux is affected by a moderate security vulnerability. To mitigate the risk, it is crucial to update the package to the latest version. Failure to do so may result in unauthorized access, data manipulation, or denial-of-service attacks. For further assistance and support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for e2fsprogs →
FAQ
e2fsprogs is a collection of utilities for managing ext2, ext3, and ext4 file systems in Linux distributions.
The vulnerability allows an attacker to perform out-of-bounds read/write operations, potentially leading to unauthorized access, data modification, or denial-of-service.
To fix this vulnerability, update the e2fsprogs package to version 1.46.5-3.el9 or later.
No, there is no known workaround for this vulnerability. Applying the security update is the recommended solution.
You can find more information about this vulnerability in the CVE page(s) listed in the References section of the original advisory.
Related vulnerabilities
Recent vulnerabilities recorded for e2fsprogs.
