{"id":"CVE-2019-5188","aliases":["ALPINE-CVE-2019-5188","BELL-CVE-2019-5188","DEBIAN-CVE-2019-5188","DLA-2156-1","DLA-2290-1","EUVD-2019-14793","GHSA-qv2m-8j7x-p5c8","MGASA-2020-0039","RHSA-2020:1913","RHSA-2020:4011","SUSE-SU-2020:0265-1","SUSE-SU-2020:0360-1","UBUNTU-CVE-2019-5188","USN-4249-1","openSUSE-SU-2020:0166-1"],"status":"published","title":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01082,"percentile":0.65403,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2020-01-08T15:45:09Z","modified":"2026-10-24T10:31:01Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"e2fsprogs","fixed_in":["1.45.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"e2fsprogs","fixed_in":["1.44.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"e2fsprogs","fixed_in":["1.44.5-r2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"e2fsprogs","fixed_in":["1.45.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"e2fsprogs","fixed_in":["1.45.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"e2fsprogs","fixed_in":["1.45.5-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"e2fsprogs","fixed_in":["1.42.12-2+deb8u2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"e2fsprogs","fixed_in":["1.43.4-2+deb9u2"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"e2fsprogs","fixed_in":["1.45.5-1.mga7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"e2fsprogs","fixed_in":["1.43.8-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"e2fsprogs","fixed_in":["1.43.8-4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"e2fsprogs","fixed_in":["1.43.8-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"e2fsprogs","fixed_in":["1.43.8-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"e2fsprogs","fixed_in":["1.43.8-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"e2fsprogs","fixed_in":["1.43.8-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"e2fsprogs","fixed_in":["1.43.8-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"e2fsprogs","fixed_in":["1.43.8-3.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"e2fsprogs","fixed_in":["1.43.8-3.11.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"e2fsprogs","fixed_in":["1.42.9-3ubuntu1.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"e2fsprogs","fixed_in":["1.42.13-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"e2fsprogs","fixed_in":["1.44.1-1ubuntu1.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"e2fsprogs","fixed_in":["1.43.8-lp151.5.12.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.45.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.44.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.43.3"},{"fixed":"1.44.5-r2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.45.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.45.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.45.5-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.12-2+deb8u2"}]}],"versions":["1.42.12-1.1","1.42.12-2","1.42.12-2+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.4-2+deb9u2"}]}],"versions":["1.43.4-2","1.43.4-2+deb9u1"]},{"source":"osv","ecosystem":"Mageia:7","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.45.5-1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"e2fsprogs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"e2fsprogs-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"e2fsprogs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"e2fsprogs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"e2fsprogs-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcom_err","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcom_err-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libcom_err-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libss-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.45.4-3.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"e2fsprogs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"e2fsprogs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcom_err","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"e2fsprogs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"e2fsprogs-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libcom_err-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"e2fsprogs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"e2fsprogs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcom_err","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"e2fsprogs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"e2fsprogs-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libcom_err-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"e2fsprogs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"e2fsprogs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"e2fsprogs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcom_err","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libcom_err-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"e2fsprogs-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"e2fsprogs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"e2fsprogs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"e2fsprogs-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcom_err","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libcom_err-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"e2fsprogs-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libss-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.42.9-19.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-3.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-3.11.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.9-3ubuntu1.3+esm2"}]}],"versions":["1.42.8-1ubuntu1","1.42.8-1ubuntu2","1.42.8-1ubuntu3","1.42.9-2ubuntu1","1.42.9-3ubuntu1","1.42.9-3ubuntu1.2","1.42.9-3ubuntu1.3","1.42.9-3ubuntu1.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.13-1ubuntu1.2"}]}],"versions":["1.42.12-1ubuntu2","1.42.13-1ubuntu1","1.42.13-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44.1-1ubuntu1.3"}]}],"versions":["1.43.5-1","1.43.7-1","1.43.8-1ubuntu1","1.43.8-2","1.43.9-1","1.43.9-1ubuntu1","1.43.9-2","1.44.0-1","1.44.1-1","1.44.1-1ubuntu1","1.44.1-1ubuntu1.1","1.44.1-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.9-3ubuntu1.3+esm2"}]}],"versions":["1.42.8-1ubuntu1","1.42.8-1ubuntu2","1.42.8-1ubuntu3","1.42.9-2ubuntu1","1.42.9-3ubuntu1","1.42.9-3ubuntu1.2","1.42.9-3ubuntu1.3","1.42.9-3ubuntu1.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.42.13-1ubuntu1.2"}]}],"versions":["1.42.12-1ubuntu2","1.42.13-1ubuntu1","1.42.13-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.44.1-1ubuntu1.3"}]}],"versions":["1.43.5-1","1.43.7-1","1.43.8-1ubuntu1","1.43.8-2","1.43.9-1","1.43.9-1ubuntu1","1.43.9-2","1.44.0-1","1.44.1-1","1.44.1-1ubuntu1","1.44.1-1ubuntu1.1","1.44.1-1ubuntu1.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"e2fsprogs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.8-lp151.5.12.1"}]}]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"e2fsprogs_project","product":"e2fsprogs"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"hci_compute_node_firmware"},{"vendor":"netapp","product":"solidfire\\,_enterprise_sds_\\\u0026_hci_storage_node"},{"vendor":"opensuse","product":"leap"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AKETJ6BREDUHRWQTV35SPGG5C6H7KSI/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4249-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DOBCYQKCTTWXBLMUPJ5TX3FY7JNCOKY/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00004.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00030.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00021.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0973","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://security.netapp.com/advisory/ntap-20220506-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5188","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AKETJ6BREDUHRWQTV35SPGG5C6H7KSI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DOBCYQKCTTWXBLMUPJ5TX3FY7JNCOKY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2AKETJ6BREDUHRWQTV35SPGG5C6H7KSI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DOBCYQKCTTWXBLMUPJ5TX3FY7JNCOKY"},{"url":"https://security.netapp.com/advisory/ntap-20220506-0001"},{"url":"https://usn.ubuntu.com/4249-1"},{"url":"https://github.com/advisories/GHSA-qv2m-8j7x-p5c8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-5188","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-5188","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-5188","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0039.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26031","tags":["report"]},{"url":"http://e2fsprogs.sourceforge.net/e2fsprogs-release.html#1.45.5","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1913","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1768555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1780279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1788573","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1913.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5094","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5094","tags":["advisory"]},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-5188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790048","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5188","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:4011","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.9_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1711880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1780277","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4011.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200265-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1160571","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5188","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200360-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-5188","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4249-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UAY64T4BPHMZUGCVF62LR4FNFISTO7DG/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-5188","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","status":"published","published":"2020-01-08T15:45:09Z","modified":"2026-10-14T06:35:38.977Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:20:18.746972Z"}],"euvd":[{"id":"EUVD-2019-14793","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","status":"published","published":"2020-01-08T15:45:09Z","modified":"2026-10-14T06:35:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:17.374818Z"}],"ghsa":[{"id":"GHSA-qv2m-8j7x-p5c8","title":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs...","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","status":"published","published":"2022-05-24T17:05:53Z","modified":"2026-10-14T09:32:31Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:13:23.530725Z"}],"nvd":[{"id":"CVE-2019-5188","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","status":"published","published":"2020-01-08T16:15:11.5Z","modified":"2026-10-14T07:16:54.133Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:42.416368Z"}],"osv":[{"id":"ALPINE-CVE-2019-5188","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","status":"published","published":"2020-01-08T16:15:11.5Z","modified":"2026-09-21T06:17:52.523086349Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2019-5188","title":"CVE-2019-5188 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:16.757959Z","modified":"2026-03-05T07:15:23.447446Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-5188","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","status":"published","published":"2020-01-08T16:15:11.5Z","modified":"2026-10-24T10:31:01.607920346Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:12.675558Z"},{"id":"DEBIAN-CVE-2019-5188","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","status":"published","published":"2020-01-08T16:15:11.5Z","modified":"2026-10-15T07:47:34.340279118Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"RHSA-2020:1913","title":"Red Hat Security Advisory: e2fsprogs security, bug fix, and enhancement update","status":"published","published":"2024-09-16T03:27:25Z","modified":"2026-10-14T10:01:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:4011","title":"Red Hat Security Advisory: e2fsprogs security and bug fix update","status":"published","published":"2024-09-16T03:27:33Z","modified":"2026-10-14T10:01:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.57369Z"},{"id":"UBUNTU-CVE-2019-5188","description":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","status":"published","published":"2020-01-08T16:15:00Z","modified":"2026-04-22T11:58:01.979988Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:21.741399Z"},{"id":"DLA-2156-1","title":"e2fsprogs - security update","status":"published","published":"2020-03-24T00:00:00Z","modified":"2026-03-09T01:19:40.733225Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2290-1","title":"e2fsprogs - security update","status":"published","published":"2020-07-26T00:00:00Z","modified":"2026-03-09T01:21:42.870988Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"MGASA-2020-0039","title":"Updated e2fsprogs packages fix security vulnerability","description":"Updated e2fsprogs packages fix security vulnerability:\n\nA code execution vulnerability in the directory rehashing\nfunctionality (CVE-2019-5188).\n\nFor other fixes in this update, see the referenced release info.\n","status":"published","published":"2020-01-17T10:16:50Z","modified":"2026-04-16T04:43:43.617618477Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:0166-1","title":"Security update for e2fsprogs","description":"This update for e2fsprogs fixes the following issues:\n\n- CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-02-04T17:13:21Z","modified":"2026-02-04T02:24:42.000364Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2020:0265-1","title":"Security update for e2fsprogs","description":"This update for e2fsprogs fixes the following issues:\n\n- CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).\n","status":"published","published":"2020-01-30T13:05:38Z","modified":"2026-02-04T03:58:11.833485Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0360-1","title":"Security update for e2fsprogs","description":"This update for e2fsprogs fixes the following issues:\n\n- CVE-2019-5188: Fixed a code execution vulnerability in the directory rehashing functionality (bsc#1160571).\n","status":"published","published":"2020-02-07T09:44:30Z","modified":"2026-02-04T03:08:11.552808Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-4249-1","title":"e2fsprogs vulnerability","description":"It was discovered that e2fsprogs incorrectly handled certain ext4 partitions.\nAn attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2020-01-23T12:21:20Z","modified":"2026-06-29T13:47:56.212552568Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}