MGASA-2015-0422
Updated exfat-utils package fixes security vulnerabilities
Fix heap overflow and endless loop in exfatfsck
exfat-utils is a collection of tools to work with the exFAT filesystem. Fuzzing the exfatfsck with american fuzzy lop led to the discovery of a write heap overflow and an endless loop.
Especially at risk are systems that are configured to run filesystem checks automatically on external devices like USB flash drives.
A malformed input can cause a write heap overflow in the function verify_vbr_checksum. It might be possible to use this for code execution.
Another malformed input can cause an endless loop, leading to a possible denial of service.
What each source reports
OSV No score
Updated exfat-utils package fixes security vulnerabilities
Fix heap overflow and endless loop in exfatfsck
exfat-utils is a collection of tools to work with the exFAT filesystem. Fuzzing the exfatfsck with american fuzzy lop led to the discovery of a write heap overflow and an endless loop.
Especially at risk are systems that are configured to run filesystem checks automatically on external devices like USB flash drives.
A malformed input can cause a write heap overflow in the function verify_vbr_checksum. It might be possible to use this for code execution.
Another malformed input can cause an endless loop, leading to a possible denial of service.
- Record
MGASA-2015-0422- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exfat-utilsMageia:5 |
before 1.1.0-3.1.mga5 | 1.1.0-3.1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0422 is a vulnerability with no CVSS score yet in exfat-utils, published November 2, 2015. No source lists public exploit code. Fixed in exfat-utils 1.1.0-3.1.mga5.