{"id":"CVE-2015-0247","aliases":["DEBIAN-CVE-2015-0247","DLA-153-1","DSA-3166-1","EUVD-2015-0269","GHSA-33r9-2w5v-33vg","MGASA-2015-0061","SUSE-SU-2015:1341-1","SUSE-SU-2015:1364-1","SUSE-SU-2018:1987-1","UBUNTU-CVE-2015-0247","USN-2507-1"],"status":"published","title":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12...","description":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0089,"percentile":0.59587,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2015-02-11T20:47:51Z","modified":"2026-09-09T06:47:20Z","fixes":[{"ecosystem":"Debian:12","package":"e2fsprogs","fixed_in":["1.42.12-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"e2fsprogs","fixed_in":["1.42.12-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"e2fsprogs","fixed_in":["1.42.12-1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"e2fsprogs","fixed_in":["1.41.12-4+deb6u1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"e2fsprogs","fixed_in":["1.42.9-2.1.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"e2fsprogs","fixed_in":["1.42.9-3ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.12-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.12-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.12-1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41.12-4+deb6u1"}]}],"versions":["1.41.12-2","1.41.12-3","1.41.12-4","1.41.12-4stable1"]},{"source":"osv","ecosystem":"Debian:7","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.5-1.1+deb7u1"}]}],"versions":["1.42.5-1.1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.9-2.1.mga4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.11-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.11-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.11-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.11-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.9-3ubuntu1.2"}]}],"versions":["1.42.8-1ubuntu1","1.42.8-1ubuntu2","1.42.8-1ubuntu3","1.42.9-2ubuntu1","1.42.9-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.9-3ubuntu1.2"}]}],"versions":["1.42.8-1ubuntu1","1.42.8-1ubuntu2","1.42.8-1ubuntu3","1.42.9-2ubuntu1","1.42.9-3ubuntu1"],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"e2fsprogs_project","product":"e2fsprogs"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://security.gentoo.org/glsa/201701-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150606.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/100740","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.securityfocus.com/archive/1/534633/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3166","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://advisories.mageia.org/MGASA-2015-0061.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://packetstormsecurity.com/files/130283/e2fsprogs-Input-Sanitization.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://www.ocert.org/advisories/ocert-2015-002.html","tags":["x_refsource_MISC","x_transferred","US Government Resource","advisory","report"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150805.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2507-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/72520","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=f66e6ce4","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149434.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:045","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:067","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1187032","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00019.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0247"},{"url":"https://github.com/advisories/GHSA-33r9-2w5v-33vg"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-0247","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0061.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15208","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151341-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/915402","tags":["report"]},{"url":"https://bugzilla.suse.com/918346","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1572","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151364-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/932539","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181987-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1009532","tags":["report"]},{"url":"https://bugzilla.suse.com/1038194","tags":["report"]},{"url":"https://bugzilla.suse.com/960273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0247","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2507-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0247","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1572","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-0247","description":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.","status":"published","published":"2015-02-17T15:00:00Z","modified":"2024-08-06T04:03:10.673Z","updated_at":"2026-11-02T14:35:45.428221Z"}],"euvd":[{"id":"EUVD-2015-0269","description":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.","status":"published","published":"2015-02-17T15:00:00Z","modified":"2024-08-06T04:03:10Z","updated_at":"2026-11-03T02:22:20.481932Z"}],"ghsa":[{"id":"GHSA-33r9-2w5v-33vg","title":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12...","description":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.","status":"published","published":"2022-05-14T02:49:57Z","modified":"2023-02-02T05:07:01Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:52:24.832262Z"}],"nvd":[{"id":"CVE-2015-0247","description":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.","status":"published","published":"2015-02-17T15:59:02.983Z","modified":"2026-06-17T00:19:48.997Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:01.643178Z"}],"osv":[{"id":"CVE-2015-0247","description":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.","status":"published","published":"2015-02-17T15:59:02Z","modified":"2026-04-16T06:19:16.232086991Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-0247","description":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.","status":"published","published":"2015-02-17T15:59:02.983Z","modified":"2026-09-09T06:47:20.326732392Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"DLA-153-1","title":"e2fsprogs - security update","status":"published","published":"2015-02-16T00:00:00Z","modified":"2026-03-09T01:00:43.453048Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3166-1","title":"e2fsprogs - security update","status":"published","published":"2015-02-22T00:00:00Z","modified":"2026-03-09T01:17:50.093512Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0061","title":"Updated e2fsprogs packages fix CVE-2015-0247","description":"Updated e2fsprogs packages fix security vulnerability:\n\nThe libext2fs library, part of e2fsprogs and utilized by its utilities, is\naffected by a boundary check error on block group descriptor information,\nleading to a heap based buffer overflow. A specially crafted filesystem image\ncan be used to trigger the vulnerability (CVE-2015-0247).\n","status":"published","published":"2015-02-11T20:47:51Z","modified":"2026-04-16T06:25:23.11190711Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"SUSE-SU-2015:1341-1","title":"Security update for e2fsprogs","description":"\nTwo security issues were fixed in e2fsprogs:\n\nSecurity issues fixed:\n\n* CVE-2015-0247: Various heap overflows were fixed in e2fsprogs (fsck, dumpe2fs, e2image...).\n* CVE-2015-1572: Fixed a potential buffer overflow in closefs() (bsc#918346 )\n","status":"published","published":"2015-06-29T08:09:19Z","modified":"2026-02-04T04:24:14.044701Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1364-1","title":"Security update for e2fsprogs","description":"\nTwo security issues were fixed in e2fsprogs:\n\n    * CVE-2015-0247: Various heap overflows were fixed in e2fsprogs (fsck,\n      dumpe2fs, e2image).\n    * CVE-2015-1572: Fixed a potential buffer overflow in closefs().\n      (bsc#918346)\n\nAdditionally, badblocks was enhanced to work with very large partitions. \n(bsc#932539)\n\nSecurity Issues:\n\n    * CVE-2015-0247\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0247\u003e\n    * CVE-2015-1572\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1572\u003e\n\n","status":"published","published":"2015-06-26T12:38:26Z","modified":"2026-02-04T04:21:47.260489Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2018:1987-1","title":"Security update for e2fsprogs","description":"This update for e2fsprogs fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-0247: Fixed couple of heap overflows in e2fsprogs (fsck, dumpe2fs, e2image...) (bsc#915402).\n- CVE-2015-1572: Fixed potential buffer overflow in closefs() (bsc#918346).\n\nBug fixes:\n\n- bsc#1038194: generic/405 test fails with /dev/mapper/thin-vol is inconsistent on ext4 file system.\n- bsc#1009532: resize2fs hangs when trying to resize a large ext4 file system.\n- bsc#960273: xfsprogs does not call %{?regenerate_initrd_post}.\n","status":"published","published":"2018-07-19T07:50:35Z","modified":"2026-02-04T03:47:34.718637Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"UBUNTU-CVE-2015-0247","description":"Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image.","status":"published","published":"2015-02-17T00:00:00Z","modified":"2026-04-22T09:59:45.516023Z","updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"USN-2507-1","title":"e2fsprogs vulnerabilities","description":"Jose Duart discovered that e2fsprogs incorrectly handled invalid block\ngroup descriptor data. A local attacker could use this issue with a\ncrafted filesystem image to possibly execute arbitrary code.\n(CVE-2015-0247, CVE-2015-1572)\n","status":"published","published":"2015-02-23T18:10:48Z","modified":"2026-04-22T09:09:24.562532Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}