CVE

Id
78849  
CVE No.
CVE-2015-1572  
Status
Candidate  
Description
Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.  
Phase
Assigned (20150210)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
718992 78849 CVE-2015-1572 CONFIRM:https://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=49d0fe2a14f2a23da2fe299643379b8c1d37df73  View
718993 78849 CVE-2015-1572 CONFIRM:http://advisories.mageia.org/MGASA-2015-0088.html  View
718994 78849 CVE-2015-1572 DEBIAN:DSA-3166  View
718995 78849 CVE-2015-1572 URL:http://www.debian.org/security/2015/dsa-3166  View
718996 78849 CVE-2015-1572 FEDORA:FEDORA-2015-2511  View
718997 78849 CVE-2015-1572 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150606.html  View
718998 78849 CVE-2015-1572 FEDORA:FEDORA-2015-2516  View
718999 78849 CVE-2015-1572 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/150805.html  View
719000 78849 CVE-2015-1572 GENTOO:GLSA-201507-22  View
719001 78849 CVE-2015-1572 URL:https://security.gentoo.org/glsa/201507-22  View
719002 78849 CVE-2015-1572 MANDRIVA:MDVSA-2015:067  View
719003 78849 CVE-2015-1572 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:067  View
719004 78849 CVE-2015-1572 MANDRIVA:MDVSA-2015:068  View
719005 78849 CVE-2015-1572 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2015:068  View
719006 78849 CVE-2015-1572 SUSE:openSUSE-SU-2015:1002  View
719007 78849 CVE-2015-1572 URL:http://lists.opensuse.org/opensuse-updates/2015-06/msg00006.html  View
719008 78849 CVE-2015-1572 SUSE:openSUSE-SU-2015:1006  View
719009 78849 CVE-2015-1572 URL:http://lists.opensuse.org/opensuse-updates/2015-06/msg00010.html  View
719010 78849 CVE-2015-1572 UBUNTU:USN-2507-1  View
719011 78849 CVE-2015-1572 URL:http://www.ubuntu.com/usn/USN-2507-1  View
719012 78849 CVE-2015-1572 BID:72709  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6414 JVNDB-2015-001734 Microsoft Internet Explorer 8 から 11 における任意のコードを実行される脆弱性 Microsoft Internet Explorer 8 から 11 には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-1624 78849 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001734.html  View