{"id":"CVE-2026-89088","aliases":["DEBIAN-CVE-2026-89088","EUVD-2026-103203","GHSA-phmc-786q-m6fp","MGASA-2026-0512","OESA-2026-4171","OESA-2026-4172","OESA-2026-4173","OESA-2026-4174","SUSE-SU-2026:5090-1","SUSE-SU-2026:5117-1","UBUNTU-CVE-2026-89088"],"status":"published","title":"Parted: parted: denial of service via heap buffer overflow during fat16 resize","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00216,"percentile":0.121,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2026-09-30T13:47:16Z","modified":"2026-11-06T02:17:55Z","fixes":[{"ecosystem":"Debian:14","package":"parted","fixed_in":["3.8-2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"parted","fixed_in":["3.6-4.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"parted","fixed_in":["3.6-4.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"parted","fixed_in":["3.6-4.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"parted","fixed_in":["3.5-4.oe2203sp4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.5-3","3.6-1","3.6-2","3.6-3","3.6-3.1","3.6-3.1~exp1","3.6-4","3.6-5","3.6-5+hurd.1","3.6-6","3.7-1","3.8-2"]},{"source":"osv","ecosystem":"Debian:13","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-5","3.6-5+hurd.1","3.6-6","3.7-1","3.8-2"]},{"source":"osv","ecosystem":"Debian:14","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8-2"}]}],"versions":["3.6-5","3.6-5+hurd.1","3.6-6","3.7-1"]},{"source":"osv","ecosystem":"Mageia:10","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-2.1.mga10"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-4.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-4.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6-4.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5-4.oe2203sp4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-37.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-37.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2-150300.21.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3-16ubuntu1","2.3-16ubuntu2","2.3-16ubuntu3","2.3-17","2.3-18","2.3-19","2.3-19ubuntu1","2.3-19ubuntu1.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2-7ubuntu1","3.2-12","3.2-13","3.2-14","3.2-14ubuntu1","3.2-15","3.2-15ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2-18","3.2-20","3.2-20ubuntu0.1","3.2-20ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2-26","3.3-1","3.3-3","3.3-4","3.3-4ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.4-1","3.4-1build1","3.4-2","3.4-2build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-3","3.6-3.1build2","3.6-4build1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-6","3.7-1","3.8-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"parted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6-5","3.6-6"]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-89088","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462951","tags":["issue-tracking","x_refsource_REDHAT","exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89088","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-phmc-786q-m6fp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-89088","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0512.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=36423","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2K3TJ47ZMRSILG3IESTHGOOFEBBL5HS4/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/6UHEOPPKU525Y6OAUPMV2W65RVVSAQ4V/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4171","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4172","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4173","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4174","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265090-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1286017","tags":["report"]},{"url":"https://bugzilla.suse.com/1286018","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-89088","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20265117-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-89088","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89088","tags":["report"]},{"url":"https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-89088","title":"Parted: parted: denial of service via heap buffer overflow during fat16 resize","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).","status":"published","published":"2026-10-16T23:06:18.907Z","modified":"2026-11-06T01:13:45.591Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-06T02:55:55.947181Z"}],"euvd":[{"id":"EUVD-2026-103203","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).","status":"published","published":"2026-10-16T23:06:18Z","modified":"2026-11-06T01:13:45Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T02:02:53.341523Z"}],"ghsa":[{"id":"GHSA-phmc-786q-m6fp","title":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system...","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).","status":"published","published":"2026-10-17T00:31:19Z","modified":"2026-10-17T00:31:23Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:13:52.91817Z"}],"nvd":[{"id":"CVE-2026-89088","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).","status":"published","published":"2026-10-16T23:17:02.68Z","modified":"2026-11-06T02:17:55.86Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-06T06:59:06.002832Z"}],"osv":[{"id":"DEBIAN-CVE-2026-89088","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).","status":"published","published":"2026-10-16T23:17:02.68Z","modified":"2026-10-23T18:04:42.76826122Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:46:05.506112Z"},{"id":"OESA-2026-4171","title":"parted security update","description":"The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks.\r\n\r\nSecurity Fix(es):\n\nheap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)","status":"published","published":"2026-09-30T13:47:16Z","modified":"2026-10-01T02:00:04.271856476Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4172","title":"parted security update","description":"The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks.\r\n\r\nSecurity Fix(es):\n\nheap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)","status":"published","published":"2026-09-30T13:47:17Z","modified":"2026-10-01T02:00:04.293643282Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4173","title":"parted security update","description":"The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks.\r\n\r\nSecurity Fix(es):\n\nheap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)","status":"published","published":"2026-09-30T13:47:17Z","modified":"2026-10-01T02:00:03.602522992Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4174","title":"parted security update","description":"The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks.\r\n\r\nSecurity Fix(es):\n\nheap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)","status":"published","published":"2026-09-30T13:47:18Z","modified":"2026-10-01T02:00:04.727992031Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"UBUNTU-CVE-2026-89088","description":"A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).","status":"published","published":"2026-10-16T23:17:00Z","modified":"2026-10-28T20:17:35.821790453Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:57:24.828975Z"},{"id":"MGASA-2026-0512","title":"Updated parted package fixes security vulnerabilities","description":"A heap-based buffer overflow can occur when processing a specially\ncrafted FAT32 filesystem due to an integer calculation error during\nbuffer allocation. A local attacker could exploit this by enticing a\nuser or automated service to open a malicious filesystem image,\nresulting in an application crash leading to a Denial of Service (DoS)\nor potential memory corruption.\nA heap-based buffer overflow exists in libparted's file system resizing\nlogic when handling FAT16 volumes. By convincing a user or administrator\nto resize a specially crafted FAT16 file system image with malformed\ndirectory metadata, an attacker can trigger an oversized read into a\nfixed-size memory buffer. This issue causes memory corruption, resulting\nin an application crash and a denial of service (DoS).\n","status":"published","published":"2026-10-17T03:21:49Z","modified":"2026-10-17T03:30:03.782633533Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"SUSE-SU-2026:5090-1","title":"Security update for parted","description":"This update for parted fixes the following issues:\n\n- CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017).\n- CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).\n","status":"published","published":"2026-11-03T15:26:05Z","modified":"2026-11-04T14:15:13.331324415Z","updated_at":"2026-11-04T14:31:33.296313Z"},{"id":"SUSE-SU-2026:5117-1","title":"Security update for parted","description":"This update for parted fixes the following issues:\n\n- CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017).\n- CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).\n","status":"published","published":"2026-11-05T11:59:14Z","modified":"2026-11-05T19:00:04.164432317Z","updated_at":"2026-11-05T19:27:36.688147Z"}]}}