CVE:CVE-2015-0247
CNNVD:CNNVD-201502-189
e2fsprogs（又名e2fs programs）是美国软件开发者曹子德（Theodore Y. Ts'o）所研发的一套用以维护ext2、ext3和ext4文件系统（是大多数Linux发行版默认的文件系统）的工具程序集。
e2fsprogs 1.42.11及之前版本的libext2fs库中的openfs.c文件存在基于堆的缓冲区溢出漏洞。本地攻击者可借助文件系统映像中的块组描述符数据利用该漏洞执行任意代码。
solution:Upgrade e2fsprogs_project e2fsprogs to a higher version than 1.42.11,and avoid the version (,1.42.11]; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,14.04,14.10,and avoid the version 10.04,12.04,14.04,14.10; Upgrade fedoraproject fedora to a higher version than 20,21,and avoid the version 20,21