CVE-2019-5094
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3.
Published Sep 24, 2019 · updated Oct 14, 2026 · e2fsprogs project e2fsprogs
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Timeline
Detection, updates, and resolution for this record.
Sep 24, 2019 · NIST NVD
Detected
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Oct 14, 2026 · NIST NVD
Updated
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
Affected
- cpe canonical/ubuntu linux12.04
- cpe canonical/ubuntu linux14.04
- cpe debian/debian linux10.0
- cpe debian/debian linux8.0
- cpe debian/debian linux9.0
- cpe e2fsprogs project/e2fsprogsversion unspecified
- cpe fedoraproject/fedora30
- cpe fedoraproject/fedora31
- cpe netapp/hci management nodeversion unspecified
Sources
- CVE.orgCVE-2019-5094
Official CVE identifier
cve.org - NIST NVDCVE-2019-5094
An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.
nvd.nist.gov