{"id":"CVE-2015-1572","aliases":["DEBIAN-CVE-2015-1572","DLA-162-1","DSA-3166-1","EUVD-2015-1704","GHSA-6f5v-c85c-6x7f","MGASA-2015-0088","SUSE-SU-2015:1341-1","SUSE-SU-2015:1364-1","SUSE-SU-2018:1987-1","UBUNTU-CVE-2015-1572","USN-2507-1"],"status":"published","title":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12...","description":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00591,"percentile":0.48513,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2015-02-16T00:00:00Z","modified":"2026-09-09T06:47:26Z","fixes":[{"ecosystem":"Debian:12","package":"e2fsprogs","fixed_in":["1.42.12-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"e2fsprogs","fixed_in":["1.42.12-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"e2fsprogs","fixed_in":["1.42.12-1.1"],"sources":["osv"]},{"ecosystem":"Debian:6.0","package":"e2fsprogs","fixed_in":["1.41.12-4+deb6u2"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"e2fsprogs","fixed_in":["1.42.9-2.2.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"e2fsprogs","fixed_in":["1.42.9-3ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.12-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.12-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.12-1.1"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.41.12-4+deb6u2"}]}],"versions":["1.41.12-2","1.41.12-3","1.41.12-4","1.41.12-4stable1"]},{"source":"osv","ecosystem":"Debian:7","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.5-1.1+deb7u1"}]}],"versions":["1.42.5-1.1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:4","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.9-2.2.mga4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.11-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.11-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.11-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.11-7.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.9-3ubuntu1.2"}]}],"versions":["1.42.8-1ubuntu1","1.42.8-1ubuntu2","1.42.8-1ubuntu3","1.42.9-2ubuntu1","1.42.9-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.9-3ubuntu1.2"}]}],"versions":["1.42.8-1ubuntu1","1.42.8-1ubuntu2","1.42.8-1ubuntu3","1.42.9-2ubuntu1","1.42.9-3ubuntu1"],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"e2fsprogs_project","product":"e2fsprogs"}],"references":[{"url":"http://www.securityfocus.com/bid/72709","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150606.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.debian.org/security/2015/dsa-3166","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:068","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=49d0fe2a14f2a23da2fe299643379b8c1d37df73","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201507-22","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150805.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.ubuntu.com/usn/USN-2507-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://advisories.mageia.org/MGASA-2015-0088.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2015:067","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00019.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1572"},{"url":"https://github.com/advisories/GHSA-6f5v-c85c-6x7f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1572","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0088.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15352","tags":["report"]},{"url":"http://advisories.mageia.org/MGASA-2015-0061.html","tags":["advisory"]},{"url":"https://www.debian.org/security/2015/dsa-3166","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151341-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/915402","tags":["report"]},{"url":"https://bugzilla.suse.com/918346","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1572","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151364-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/932539","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181987-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1009532","tags":["report"]},{"url":"https://bugzilla.suse.com/1038194","tags":["report"]},{"url":"https://bugzilla.suse.com/960273","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-1572","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2507-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1572","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-0247","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-1572","description":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.","status":"published","published":"2015-02-24T15:00:00Z","modified":"2024-08-06T04:47:16.926Z","updated_at":"2026-11-02T14:35:44.046042Z"}],"euvd":[{"id":"EUVD-2015-1704","description":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.","status":"published","published":"2015-02-24T15:00:00Z","modified":"2024-08-06T04:47:16Z","updated_at":"2026-11-03T02:22:15.089401Z"}],"ghsa":[{"id":"GHSA-6f5v-c85c-6x7f","title":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12...","description":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.","status":"published","published":"2022-05-17T00:25:59Z","modified":"2023-02-03T05:01:42Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:53:01.625617Z"}],"nvd":[{"id":"CVE-2015-1572","description":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.","status":"published","published":"2015-02-24T15:59:05.66Z","modified":"2026-06-17T00:22:37.663Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:01.643178Z"}],"osv":[{"id":"CVE-2015-1572","description":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.","status":"published","published":"2015-02-24T15:59:05Z","modified":"2026-04-16T06:16:36.193402021Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2015-1572","description":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.","status":"published","published":"2015-02-24T15:59:05.66Z","modified":"2026-09-09T06:47:26.212600773Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DLA-162-1","title":"e2fsprogs - security update","status":"published","published":"2015-02-28T00:00:00Z","modified":"2026-03-09T01:20:42.451687Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-3166-1","title":"e2fsprogs - security update","status":"published","published":"2015-02-22T00:00:00Z","modified":"2026-03-09T01:17:50.093512Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2015-0088","title":"Updated e2fsprogs packages fix CVE-2015-1572","description":"Updated e2fsprogs packages fix security vulnerability:\n\nThe libext2fs library, part of e2fsprogs and utilized by its utilities, is\naffected by a boundary check error on block group descriptor information,\nleading to a heap based buffer overflow. A specially crafted filesystem image\ncan be used to trigger the vulnerability. This is due to an incomplete fix\nfor CVE-2015-0247 (CVE-2015-1572).\n","status":"published","published":"2015-02-26T08:26:53Z","modified":"2026-04-16T06:25:04.93939315Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"SUSE-SU-2015:1341-1","title":"Security update for e2fsprogs","description":"\nTwo security issues were fixed in e2fsprogs:\n\nSecurity issues fixed:\n\n* CVE-2015-0247: Various heap overflows were fixed in e2fsprogs (fsck, dumpe2fs, e2image...).\n* CVE-2015-1572: Fixed a potential buffer overflow in closefs() (bsc#918346 )\n","status":"published","published":"2015-06-29T08:09:19Z","modified":"2026-02-04T04:24:14.044701Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:1364-1","title":"Security update for e2fsprogs","description":"\nTwo security issues were fixed in e2fsprogs:\n\n    * CVE-2015-0247: Various heap overflows were fixed in e2fsprogs (fsck,\n      dumpe2fs, e2image).\n    * CVE-2015-1572: Fixed a potential buffer overflow in closefs().\n      (bsc#918346)\n\nAdditionally, badblocks was enhanced to work with very large partitions. \n(bsc#932539)\n\nSecurity Issues:\n\n    * CVE-2015-0247\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0247\u003e\n    * CVE-2015-1572\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1572\u003e\n\n","status":"published","published":"2015-06-26T12:38:26Z","modified":"2026-02-04T04:21:47.260489Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2018:1987-1","title":"Security update for e2fsprogs","description":"This update for e2fsprogs fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2015-0247: Fixed couple of heap overflows in e2fsprogs (fsck, dumpe2fs, e2image...) (bsc#915402).\n- CVE-2015-1572: Fixed potential buffer overflow in closefs() (bsc#918346).\n\nBug fixes:\n\n- bsc#1038194: generic/405 test fails with /dev/mapper/thin-vol is inconsistent on ext4 file system.\n- bsc#1009532: resize2fs hangs when trying to resize a large ext4 file system.\n- bsc#960273: xfsprogs does not call %{?regenerate_initrd_post}.\n","status":"published","published":"2018-07-19T07:50:35Z","modified":"2026-02-04T03:47:34.718637Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"UBUNTU-CVE-2015-1572","description":"Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.","status":"published","published":"2015-02-16T00:00:00Z","modified":"2026-04-22T10:03:23.655818Z","updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"USN-2507-1","title":"e2fsprogs vulnerabilities","description":"Jose Duart discovered that e2fsprogs incorrectly handled invalid block\ngroup descriptor data. A local attacker could use this issue with a\ncrafted filesystem image to possibly execute arbitrary code.\n(CVE-2015-0247, CVE-2015-1572)\n","status":"published","published":"2015-02-23T18:10:48Z","modified":"2026-04-22T09:09:24.562532Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}