NVD

Id
23845  
Name
CVE-2015-1572  
Description
Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-02-24  
Modified Date
2016-12-30  
Seq
2015-1572  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126653 23845 CVE-2015-1572 http://advisories.mageia.org/MGASA-2015-0088.html  View
126654 23845 CVE-2015-1572 FEDORA-2015-2511  View
126655 23845 CVE-2015-1572 FEDORA-2015-2516  View
126656 23845 CVE-2015-1572 openSUSE-SU-2015:1002  View
126657 23845 CVE-2015-1572 openSUSE-SU-2015:1006  View
126658 23845 CVE-2015-1572 DSA-3166  View
126659 23845 CVE-2015-1572 MDVSA-2015:067  View
126660 23845 CVE-2015-1572 MDVSA-2015:068  View
126661 23845 CVE-2015-1572 72709  View
126662 23845 CVE-2015-1572 USN-2507-1  View
126663 23845 CVE-2015-1572 https://git.kernel.org/cgit/fs/ext2/e2fsprogs.git/commit/?id=49d0fe2a14f2a23da2fe299643379b8c1d37df73  View
126664 23845 CVE-2015-1572 GLSA-201507-22  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6299 JVNDB-2015-001619 e2fsprogs の libext2fs ライブラリの openfs.c におけるヒープベースのバッファオーバーフローの脆弱性 e2fsprogs の libext2fs ライブラリの openfs.c には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2015-1572 78797 CVE-2015-1572 23845 4.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001619.html 2015-02-11 2015-04-08 View