Vulnerability Bulletins |
DSA-3166 e2fsprogs - security update |
|
| Affected software | Debian |
|
Jose Duart of the Google Security Team discovered a buffer overflowin e2fsprogs, a set of utilities for the ext2, ext3, and ext4 filesystems. This issue can possibly lead to arbitrary code execution ifa malicious device is plugged in, the system is configured toautomatically mount it, and the mounting process chooses to run fsckon the devices malicious filesystem. More info: https://www.debian.org/security/2015/dsa-3166 |
|