CVE-2022-1304
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a...
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
CVE-2022-1304- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-125, CWE-787
- Updated
- 2026-11-02
CVE List
7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
CVE-2022-1304- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2022-24632
7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
EUVD-2022-24632- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jrv4-gggm-r53c
7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a...
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
GHSA-jrv4-gggm-r53c- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-1304
7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
ALPINE-CVE-2022-1304- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-9407
7.8
CVE-2022-1304 affecting package e2fsprogs for versions less than 1.46.5-3
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
AZL-9407- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 19 moreShow less
OSVBELL-CVE-2022-1304
7.8
CVE-2022-1304 does not affect BellSoft software
- Record
BELL-CVE-2022-1304- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
CVE-2022-1304- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-1304
7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
DEBIAN-CVE-2022-1304- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVOESA-2022-1719
7.8
e2fsprogs security update
The e2fsprogs package consists of a lot of tools for users to create, check, modify, and correct any inconsistencies in second extended file system.
Security Fix(es):
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.(CVE-2022-1304)
- Record
OESA-2022-1719- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHBA-2023:7393
5.8
Red Hat Bug Fix Advisory: e2fsprogs bug fix update
- Record
RHBA-2023:7393- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2022:7720
5.8
Red Hat Security Advisory: e2fsprogs security and bug fix update
- Record
RHSA-2022:7720- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRHSA-2022:8361
5.8
Red Hat Security Advisory: e2fsprogs security update
- Record
RHSA-2022:8361- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRLSA-2022:7720
5.8
Moderate: e2fsprogs security and bug fix update
The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.
Security Fix(es):
- e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.
- Record
RLSA-2022:7720- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVRLSA-2022:8361
5.8
Moderate: e2fsprogs security update
The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.
Security Fix(es):
- e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.
- Record
RLSA-2022:8361- CVSS 3.1
- 5.8 Medium
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-1304
7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.
- Record
UBUNTU-CVE-2022-1304- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2022:7720 No score
Moderate: e2fsprogs security and bug fix update
The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.
Security Fix(es):
- e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2022:7720- Updated
- 2026-11-02
OSVALSA-2022:8361 No score
Moderate: e2fsprogs security update
The e2fsprogs packages provide a number of utilities for creating, checking, modifying, and correcting the ext2, ext3, and ext4 file systems.
Security Fix(es):
- e2fsprogs: out-of-bounds read/write via crafted filesystem (CVE-2022-1304)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2022:8361- Updated
- 2026-11-02
OSVCLSA-2024-1711476689 No score
e2fsprogs: Fix of CVE-2022-1304
- CVE-2022-1304.patch: libext2fs: add sanity check to extent manipulation
- Record
CLSA-2024-1711476689- Updated
- 2026-11-02
OSVMGASA-2022-0384 No score
Updated e2fsprogs packages fix security vulnerability
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem. (CVE-2022-1304)
- Record
MGASA-2022-0384- Updated
- 2026-11-02
OSVSUSE-SU-2022:1652-1 No score
Security update for e2fsprogs
This update for e2fsprogs fixes the following issues:
- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446)
- Record
SUSE-SU-2022:1652-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1688-1 No score
Security update for e2fsprogs
This update for e2fsprogs fixes the following issues:
- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446)
- Record
SUSE-SU-2022:1688-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1695-1 No score
Security update for e2fsprogs
This update for e2fsprogs fixes the following issues:
- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446)
- Record
SUSE-SU-2022:1695-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1718-1 No score
Security update for e2fsprogs
This update for e2fsprogs fixes the following issues:
- CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446)
- Record
SUSE-SU-2022:1718-1- Updated
- 2026-11-02
OSVUSN-5464-1 No score
e2fsprogs vulnerability
Nils Bars discovered that e2fsprogs incorrectly handled certain file systems. A local attacker could use this issue with a crafted file system image to possibly execute arbitrary code.
- Record
USN-5464-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
e2fsprogsAlpine:v3.14 |
before 1.46.2-r1 | 1.46.2-r1 |
e2fsprogsAlpine:v3.15 |
before 1.46.6-r0 | 1.46.6-r0 |
e2fsprogsAlpine:v3.16 |
before 1.46.6-r0 | 1.46.6-r0 |
e2fsprogsAlpine:v3.17 |
before 1.46.6-r0 | 1.46.6-r0 |
e2fsprogsAlmaLinux:8 |
before 1.45.6-5.el8 | 1.45.6-5.el8 |
e2fsprogs-develAlmaLinux:8 |
before 1.45.6-5.el8 | 1.45.6-5.el8 |
e2fsprogs-libsAlmaLinux:8 |
before 1.45.6-5.el8 | 1.45.6-5.el8 |
libcom_errAlmaLinux:8 |
before 1.45.6-5.el8 | 1.45.6-5.el8 |
libcom_err-develAlmaLinux:8 |
before 1.45.6-5.el8 | 1.45.6-5.el8 |
libssAlmaLinux:8 |
before 1.45.6-5.el8 | 1.45.6-5.el8 |
Show 122 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libss-develAlmaLinux:8 |
before 1.45.6-5.el8 | 1.45.6-5.el8 |
e2fsprogsAlmaLinux:9 |
before 1.46.5-3.el9 | 1.46.5-3.el9 |
e2fsprogs-develAlmaLinux:9 |
before 1.46.5-3.el9 | 1.46.5-3.el9 |
e2fsprogs-libsAlmaLinux:9 |
before 1.46.5-3.el9 | 1.46.5-3.el9 |
libcom_errAlmaLinux:9 |
before 1.46.5-3.el9 | 1.46.5-3.el9 |
libcom_err-develAlmaLinux:9 |
before 1.46.5-3.el9 | 1.46.5-3.el9 |
libssAlmaLinux:9 |
before 1.46.5-3.el9 | 1.46.5-3.el9 |
e2fsprogsAzure Linux:2 |
before 1.46.5-3 | 1.46.5-3 |
e2fsprogsTuxCare:CentOS:7 |
before 1.42.9-19.el7.tuxcare.els1 | 1.42.9-19.el7.tuxcare.els1 |
e2fsprogs-develTuxCare:CentOS:7 |
before 1.42.9-19.el7.tuxcare.els1 | 1.42.9-19.el7.tuxcare.els1 |
e2fsprogs-libsTuxCare:CentOS:7 |
before 1.42.9-19.el7.tuxcare.els1 | 1.42.9-19.el7.tuxcare.els1 |
e2fsprogs-staticTuxCare:CentOS:7 |
before 1.42.9-19.el7.tuxcare.els1 | 1.42.9-19.el7.tuxcare.els1 |
libcom_errTuxCare:CentOS:7 |
before 1.42.9-19.el7.tuxcare.els1 | 1.42.9-19.el7.tuxcare.els1 |
libcom_err-develTuxCare:CentOS:7 |
before 1.42.9-19.el7.tuxcare.els1 | 1.42.9-19.el7.tuxcare.els1 |
libssTuxCare:CentOS:7 |
before 1.42.9-19.el7.tuxcare.els1 | 1.42.9-19.el7.tuxcare.els1 |
libss-develTuxCare:CentOS:7 |
before 1.42.9-19.el7.tuxcare.els1 | 1.42.9-19.el7.tuxcare.els1 |
e2fsprogsDebian:12 |
before 1.46.6~rc1-1 | 1.46.6~rc1-1 |
e2fsprogsDebian:13 |
before 1.46.6~rc1-1 | 1.46.6~rc1-1 |
e2fsprogsDebian:14 |
before 1.46.6~rc1-1 | 1.46.6~rc1-1 |
e2fsprogsDebian:11 |
before 1.46.2-2+deb11u1, plus listed versions 1.46.2-2 |
1.46.2-2+deb11u1 |
e2fsprogsMageia:8 |
before 1.45.6-6.1.mga8 | 1.45.6-6.1.mga8 |
e2fsprogsopenEuler:20.03-LTS-SP1 |
before 1.45.6-11.oe1 | 1.45.6-11.oe1 |
e2fsprogsopenEuler:20.03-LTS-SP3 |
before 1.45.6-11.oe1 | 1.45.6-11.oe1 |
e2fsprogsopenEuler:22.03-LTS |
before 1.46.4-10.oe2203 | 1.46.4-10.oe2203 |
e2fsprogsRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogs-debuginfoRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogs-debugsourceRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogs-develRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogs-libsRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogs-libs-debuginfoRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
libcom_errRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
libcom_err-debuginfoRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
libcom_err-develRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
libssRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
libss-debuginfoRed Hat:rhel_eus:8.6::baseos |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogs-debuginfoRed Hat:rhel_eus:8.6::crb |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogs-debugsourceRed Hat:rhel_eus:8.6::crb |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogs-libs-debuginfoRed Hat:rhel_eus:8.6::crb |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
libcom_err-debuginfoRed Hat:rhel_eus:8.6::crb |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
libss-debuginfoRed Hat:rhel_eus:8.6::crb |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
libss-develRed Hat:rhel_eus:8.6::crb |
before 0:1.45.6-6.el8_6 | 0:1.45.6-6.el8_6 |
e2fsprogsRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-develRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-libsRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-libs-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
libcom_errRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
libcom_err-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
libcom_err-develRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
libssRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
libss-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-libs-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
libcom_err-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
libss-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
libss-develRed Hat:enterprise_linux:8::crb |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogs-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogs-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogs-develRed Hat:enterprise_linux:9::appstream |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogs-libs-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
libcom_err-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
libcom_err-develRed Hat:enterprise_linux:9::appstream |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
libss-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogsRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogs-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogs-debugsourceRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogs-libsRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogs-libs-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
libcom_errRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
libcom_err-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
libssRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
libss-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogsRocky Linux:8 |
before 0:1.45.6-5.el8 | 0:1.45.6-5.el8 |
e2fsprogsRocky Linux:9 |
before 0:1.46.5-3.el9 | 0:1.46.5-3.el9 |
e2fsprogsSUSE:HPE Helion OpenStack 8 |
before 1.42.11-16.9.1 | 1.42.11-16.9.1 |
e2fsprogsSUSE:OpenStack Cloud 8 |
before 1.42.11-16.9.1 | 1.42.11-16.9.1 |
e2fsprogsSUSE:OpenStack Cloud Crowbar 8 |
before 1.42.11-16.9.1 | 1.42.11-16.9.1 |
e2fsprogsSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 1.42.11-16.9.1 | 1.42.11-16.9.1 |
e2fsprogsSUSE:Linux Enterprise Server 12 SP2-BCL |
before 1.42.11-16.9.1 | 1.42.11-16.9.1 |
e2fsprogsSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 1.42.11-16.9.1 | 1.42.11-16.9.1 |
e2fsprogsSUSE:Linux Enterprise Server 12 SP3-BCL |
before 1.42.11-16.9.1 | 1.42.11-16.9.1 |
e2fsprogsSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Real Time 15 SP2 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Server 15-LTSS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Server 15 SP1-BCL |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Server 15 SP2-BCL |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Server for SAP Applications 15 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Manager Proxy 4.1 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Manager Retail Branch Server 4.1 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Manager Server 4.1 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Micro 5.0 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Micro 5.1 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Linux Enterprise Micro 5.2 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Enterprise Storage 6 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:Enterprise Storage 7 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsopenSUSE:Leap 15.3 |
before 1.43.8-150000.4.33.1 | 1.43.8-150000.4.33.1 |
e2fsprogsSUSE:OpenStack Cloud 9 |
before 1.43.8-3.17.1 | 1.43.8-3.17.1 |
e2fsprogsSUSE:OpenStack Cloud Crowbar 9 |
before 1.43.8-3.17.1 | 1.43.8-3.17.1 |
e2fsprogsSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 1.43.8-3.17.1 | 1.43.8-3.17.1 |
e2fsprogsSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 1.43.8-3.17.1 | 1.43.8-3.17.1 |
e2fsprogsSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 1.43.8-3.17.1 | 1.43.8-3.17.1 |
e2fsprogsSUSE:Linux Enterprise Server 12 SP5 |
before 1.43.8-3.17.1 | 1.43.8-3.17.1 |
e2fsprogsSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 1.43.8-3.17.1 | 1.43.8-3.17.1 |
e2fsprogsSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 1.46.4-150400.3.3.1 | 1.46.4-150400.3.3.1 |
e2fsprogsopenSUSE:Leap 15.4 |
before 1.46.4-150400.3.3.1 | 1.46.4-150400.3.3.1 |
e2fsprogsUbuntu:Pro:14.04:LTS |
before 1.42.9-3ubuntu1.3+esm3, plus listed versions 1.42.8-1ubuntu11.42.8-1ubuntu21.42.8-1ubuntu31.42.9-2ubuntu11.42.9-3ubuntu1 Show 4 moreShow less1.42.9-3ubuntu1.21.42.9-3ubuntu1.31.42.9-3ubuntu1.3+esm11.42.9-3ubuntu1.3+esm2 |
1.42.9-3ubuntu1.3+esm3 |
e2fsprogsUbuntu:Pro:16.04:LTS |
before 1.42.13-1ubuntu1.2+esm1, plus listed versions 1.42.12-1ubuntu21.42.13-1ubuntu11.42.13-1ubuntu1.11.42.13-1ubuntu1.2 |
1.42.13-1ubuntu1.2+esm1 |
e2fsprogsUbuntu:18.04:LTS |
before 1.44.1-1ubuntu1.4, plus listed versions 1.43.5-11.43.7-11.43.8-1ubuntu11.43.8-21.43.9-1 Show 8 moreShow less1.43.9-1ubuntu11.43.9-21.44.0-11.44.1-11.44.1-1ubuntu11.44.1-1ubuntu1.11.44.1-1ubuntu1.21.44.1-1ubuntu1.3 |
1.44.1-1ubuntu1.4 |
e2fsprogsUbuntu:20.04:LTS |
before 1.45.5-2ubuntu1.1, plus listed versions 1.45.3-4ubuntu21.45.3-4ubuntu31.45.5-2ubuntu1 |
1.45.5-2ubuntu1.1 |
e2fsprogsUbuntu:22.04:LTS |
before 1.46.5-2ubuntu1.1, plus listed versions 1.46.3-1ubuntu31.46.4-1ubuntu11.46.5-1ubuntu11.46.5-2ubuntu1 |
1.46.5-2ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-1304 is a high vulnerability (CVSS 7.8) in E2fsprogs Project E2fsprogs, published April 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in e2fsprogs 1.46.2-r1.
References
bugzilla.redhat.com/show_bug.cgi?id=2069726
lists.debian.org/debian-lts-announce/2024/10/msg00001.html
security.netapp.com/advisory/ntap-20241122-0010
cert-portal.siemens.com/productcert/html/ssa-419740.html
cert-portal.siemens.com/productcert/html/ssa-398330.html
nvd.nist.gov/vuln/detail/CVE-2022-1304
Show 37 moreShow less
access.redhat.com/errata/RHSA-2022:7720
access.redhat.com/errata/RHSA-2022:8361
access.redhat.com/security/cve/CVE-2022-1304
github.com/advisories/GHSA-jrv4-gggm-r53c
security.alpinelinux.org/vuln/CVE-2022-1304
bugzilla.redhat.com/2069726
errata.almalinux.org/8/ALSA-2022-7720.html
errata.almalinux.org/9/ALSA-2022-8361.html
docs.bell-sw.com/security/cves/CVE-2022-1304
errata.tuxcare.com/centos7-els/CLSA-2024-1711476689.html
github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1304.json
security-tracker.debian.org/tracker/CVE-2022-1304
advisories.mageia.org/MGASA-2022-0384.html
bugs.mageia.org/show_bug.cgi?id=30423
lists.suse.com/pipermail/sle-security-updates/2022-May/010997.html
lists.opensuse.org/archives/list/[email protected]/thread/HV3R6DJ424I5JBDSF3ZYYH63VRSXB65J
ubuntu.com/security/notices/USN-5464-1
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1719
access.redhat.com/errata/RHBA-2023:7393
security.access.redhat.com/data/csaf/v2/advisories/2023/rhba-2023_7393.json
cve.org/CVERecord?id=CVE-2022-1304
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=2083621
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7720.json
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8361.json
errata.rockylinux.org/RLSA-2022:7720
errata.rockylinux.org/RLSA-2022:8361
suse.com/support/update/announcement/2022/suse-su-20221652-1
bugzilla.suse.com/1198446
suse.com/security/cve/CVE-2022-1304
suse.com/support/update/announcement/2022/suse-su-20221688-1
suse.com/support/update/announcement/2022/suse-su-20221695-1
suse.com/support/update/announcement/2022/suse-su-20221718-1
ubuntu.com/security/CVE-2022-1304
marc.info?l=linux-ext4&m=165056234501732&w=2