CVE:CVE-2019-5094
CNNVD:CNNVD-201909-1106
E2fsprogs是一套用以维护ext2、ext3和ext4文件系统的工具程序集。
E2fsprogs 1.43.3版本至1.45.3版本中存在缓冲区错误漏洞。攻击者可通过损坏分区利用该漏洞执行代码。
solution:Upgrade e2fsprogs_project e2fsprogs to a higher version than 1.45.3,and avoid the version [1.43.3,1.45.3]; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,19.04,and avoid the version 12.04,14.04,16.04,18.04,19.04; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -