Every CVE Search/ Get API key

CVE-2019-5188

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...

7.5 HighFix available

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.08%Down 1.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.5

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Record
CVE-2019-5188
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2019-14793 7.5

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Record
EUVD-2019-14793
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qv2m-8j7x-p5c8 6.7

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Record
GHSA-qv2m-8j7x-p5c8
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
NVD 7.5

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Record
CVE-2019-5188
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
4.4 MediumAV:L/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2019-5188 6.7

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Record
ALPINE-CVE-2019-5188
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2019-5188 6.7

CVE-2019-5188 does not affect BellSoft software

Record
BELL-CVE-2019-5188
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 10 moreShow less
OSV 6.7

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Record
CVE-2019-5188
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-5188 6.7

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Record
DEBIAN-CVE-2019-5188
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:1913 7.5

Red Hat Security Advisory: e2fsprogs security, bug fix, and enhancement update

Record
RHSA-2020:1913
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:4011 7.5

Red Hat Security Advisory: e2fsprogs security and bug fix update

Record
RHSA-2020:4011
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-5188 6.7

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Record
UBUNTU-CVE-2019-5188
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
7.5 HighCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2020-0039 No score

Updated e2fsprogs packages fix security vulnerability

Updated e2fsprogs packages fix security vulnerability:

A code execution vulnerability in the directory rehashing functionality (CVE-2019-5188).

For other fixes in this update, see the referenced release info.

Record
MGASA-2020-0039
Updated
2026-11-02
OSVopenSUSE-SU-2020:0166-1 No score

Security update for e2fsprogs

This update for e2fsprogs fixes the following issues:

  • CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0166-1
Updated
2026-11-02
OSVSUSE-SU-2020:0265-1 No score

Security update for e2fsprogs

This update for e2fsprogs fixes the following issues:

  • CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).
Record
SUSE-SU-2020:0265-1
Updated
2026-11-02
OSVSUSE-SU-2020:0360-1 No score

Security update for e2fsprogs

This update for e2fsprogs fixes the following issues:

  • CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).
Record
SUSE-SU-2020:0360-1
Updated
2026-11-02
OSVUSN-4249-1 No score

e2fsprogs vulnerability

It was discovered that e2fsprogs incorrectly handled certain ext4 partitions. An attacker could possibly use this issue to execute arbitrary code.

Record
USN-4249-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
e2fsprogs
Alpine:v3.10
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.11
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.12
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.13
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.14
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.15
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.16
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.17
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.18
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.19
 1.43.3 up to 1.45.5-r0
1.45.5-r0
Show 73 moreShow less
Affected packages
PackageAffectedFixed
e2fsprogs
Alpine:v3.20
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.21
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.22
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.23
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.24
 1.43.3 up to 1.45.5-r0
1.45.5-r0
e2fsprogs
Alpine:v3.8
 1.43.3 up to 1.44.2-r2
1.44.2-r2
e2fsprogs
Alpine:v3.9
 1.43.3 up to 1.44.5-r2
1.44.5-r2
e2fsprogs
Debian:12
 before 1.45.5-1
1.45.5-1
e2fsprogs
Debian:13
 before 1.45.5-1
1.45.5-1
e2fsprogs
Debian:14
 before 1.45.5-1
1.45.5-1
e2fsprogs
Debian:8
 before 1.42.12-2+deb8u2, plus listed versions
1.42.12-1.11.42.12-21.42.12-2+deb8u1
1.42.12-2+deb8u2
e2fsprogs
Debian:9
 before 1.43.4-2+deb9u2, plus listed versions
1.43.4-21.43.4-2+deb9u1
1.43.4-2+deb9u2
e2fsprogs
Mageia:7
 before 1.45.5-1.mga7
1.45.5-1.mga7
e2fsprogs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
e2fsprogs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
e2fsprogs-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
e2fsprogs-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
e2fsprogs-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
e2fsprogs-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
libcom_err
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
libcom_err-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
libcom_err-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
libss
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
libss-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:1.45.4-3.el8
0:1.45.4-3.el8
e2fsprogs
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-libs
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libcom_err
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libss
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-static
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libcom_err-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libss-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-libs
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libcom_err
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libss
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-static
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libcom_err-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libss-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-libs
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libcom_err
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libcom_err-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libss
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-static
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libss-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-libs
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libcom_err
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libcom_err-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libss
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs-static
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
libss-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:1.42.9-19.el7
0:1.42.9-19.el7
e2fsprogs
SUSE:Linux Enterprise Module for Basesystem 15
 before 1.43.8-4.17.1
1.43.8-4.17.1
e2fsprogs
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 1.43.8-4.17.1
1.43.8-4.17.1
e2fsprogs
SUSE:Linux Enterprise Desktop 12 SP4
 before 1.43.8-3.11.1
1.43.8-3.11.1
e2fsprogs
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 1.43.8-3.11.1
1.43.8-3.11.1
e2fsprogs
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.43.8-3.11.1
1.43.8-3.11.1
e2fsprogs
SUSE:Linux Enterprise Server 12 SP4
 before 1.43.8-3.11.1
1.43.8-3.11.1
e2fsprogs
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.43.8-3.11.1
1.43.8-3.11.1
e2fsprogs
SUSE:Linux Enterprise Server 12 SP5
 before 1.43.8-3.11.1
1.43.8-3.11.1
e2fsprogs
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.43.8-3.11.1
1.43.8-3.11.1
e2fsprogs
Ubuntu:Pro:14.04:LTS
 before 1.42.9-3ubuntu1.3+esm2, plus listed versions
1.42.8-1ubuntu11.42.8-1ubuntu21.42.8-1ubuntu31.42.9-2ubuntu11.42.9-3ubuntu11.42.9-3ubuntu1.21.42.9-3ubuntu1.31.42.9-3ubuntu1.3+esm1
1.42.9-3ubuntu1.3+esm2
e2fsprogs
Ubuntu:16.04:LTS
 before 1.42.13-1ubuntu1.2, plus listed versions
1.42.12-1ubuntu21.42.13-1ubuntu11.42.13-1ubuntu1.1
1.42.13-1ubuntu1.2
e2fsprogs
Ubuntu:18.04:LTS
 before 1.44.1-1ubuntu1.3, plus listed versions
1.43.5-11.43.7-11.43.8-1ubuntu11.43.8-21.43.9-1
Show 7 moreShow less
1.43.9-1ubuntu11.43.9-21.44.0-11.44.1-11.44.1-1ubuntu11.44.1-1ubuntu1.11.44.1-1ubuntu1.2
1.44.1-1ubuntu1.3
e2fsprogs
openSUSE:Leap 15.1
 before 1.43.8-lp151.5.12.1
1.43.8-lp151.5.12.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-5188 is a high vulnerability (CVSS 7.5) in E2fsprogs Project E2fsprogs, published January 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in e2fsprogs 1.45.5-r0.

References

Show 41 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open