CVE-2019-5188

Timeline

Detection, updates, and resolution for this record.

1. Jan 8, 2020 · NIST NVD

   Detected

   A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

2. Oct 14, 2026 · NIST NVD

   Updated

   A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Affected

• cpe canonical/ubuntu linux12.04
• cpe canonical/ubuntu linux14.04
• cpe canonical/ubuntu linux16.04
• cpe debian/debian linux8.0
• cpe debian/debian linux9.0
• cpe e2fsprogs project/e2fsprogsversion unspecified
• cpe fedoraproject/fedora30
• cpe fedoraproject/fedora31
• cpe netapp/hci compute node firmwareversion unspecified
• cpe netapp/solidfire, enterprise sds & hci storage nodeversion unspecified
• cpe opensuse/leap15.1

Sources

• CVE.orgCVE-2019-5188

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2019-5188

  30-day exploitation probability 1.1%

  first.org
• NIST NVDCVE-2019-5188

  A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerabil

  nvd.nist.gov

References

• Mailing List · lists.opensuse.org
• Mailing List · lists.debian.org
• Mailing List · lists.debian.org
• Reference · lists.fedoraproject.org
• Reference · lists.fedoraproject.org
• Third Party Advisory · security.netapp.com
• Exploit · talosintelligence.com
• Third Party Advisory · usn.ubuntu.com