Vulnerability Spotlight: Code execution vulnerability in E2fsprogs
Summary: Cisco Talos disclosed a code execution vulnerability in E2fsprogs' directory rehashing functionality, where a specially crafted ext4 directory causes an out-of-bounds write on the stack that allows an attacker to execute code by corrupting a partition. Talos confirmed versions 1.43.3 through 1.45.3 are affected, tracked as TALOS-2019-0973/CVE-2019-5188, and worked with E2fsprogs to release an update, with Snort rules 52570 and 52571 detecting exploitation attempts.
What's compelling: E2fsprogs ships by default on most Linux systems and is often treated as essential software, so a flaw reachable by corrupting a partition sits on a very large installed base that many teams never think to patch.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5188
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026