{"id":"CVE-2019-5188","title":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4","summary":"A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can cor…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-787"],"vendor":"e2fsprogs_project","product":"e2fsprogs","affected":["e2fsprogs >= 1.43.3, <= 1.45.4","fedora = 30","fedora = 31","debian_linux = 8.0","debian_linux = 9.0","ubuntu_linux = 12.04","ubuntu_linux = 14.04","ubuntu_linux = 16.04","ubuntu_linux = 18.04","ubuntu_linux = 19.04","ubuntu_linux = 19.10","leap = 15.1","hci_compute_node_firmware","solidfire,_enterprise_sds_&_hci_storage_node"],"published":"2020-01-08","updated":"2026-10-14","sourceUpdated":"2026-10-14T07:16:54.133","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-5188","references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00004.html","label":"talos-cna@cisco.com"},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00030.html","label":"talos-cna@cisco.com"},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00021.html","label":"talos-cna@cisco.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AKETJ6BREDUHRWQTV35SPGG5C6H7KSI/","label":"talos-cna@cisco.com"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DOBCYQKCTTWXBLMUPJ5TX3FY7JNCOKY/","label":"talos-cna@cisco.com"},{"url":"https://security.netapp.com/advisory/ntap-20220506-0001/","label":"talos-cna@cisco.com"},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0973","label":"talos-cna@cisco.com"},{"url":"https://usn.ubuntu.com/4249-1/","label":"talos-cna@cisco.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00004.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/03/msg00030.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2020/07/msg00021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AKETJ6BREDUHRWQTV35SPGG5C6H7KSI/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DOBCYQKCTTWXBLMUPJ5TX3FY7JNCOKY/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20220506-0001/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2019-0973","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4249-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-5188.json"},{"url":"https://access.redhat.com/security/cve/CVE-2019-5188"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790048"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-5188"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-5188"},{"url":"https://access.redhat.com/errata/RHSA-2020:4011"},{"url":"https://access.redhat.com/errata/RHSA-2021:0949"},{"url":"https://access.redhat.com/errata/RHSA-2020:1913"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"epss":0.01082,"epssPercentile":0.64994,"ingestedAt":"2026-10-14T07:21:04.825Z","patched":["enterprise_linux_client_v_7","enterprise_linux_client_optional_v_7","enterprise_linux_computenode_v_7","enterprise_linux_computenode_optional_v_7","enterprise_linux_server_v_7","openshift_do 1","enterprise_linux_server_optional_v_7","enterprise_linux_workstation_v_7","enterprise_linux_workstation_optional_v_7","enterprise_linux_baseos_v_8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2025-05-30T19:18:31.503746Z"},"slug":"CVE-2019-5188","body":"## Overview\n\nA code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.\n\n## Affected\n\n- `e2fsprogs >= 1.43.3, <= 1.45.4`\n- `fedora = 30`\n- `fedora = 31`\n- `debian_linux = 8.0`\n- `debian_linux = 9.0`\n- `ubuntu_linux = 12.04`\n- `ubuntu_linux = 14.04`\n- `ubuntu_linux = 16.04`\n- `ubuntu_linux = 18.04`\n- `ubuntu_linux = 19.04`\n- `ubuntu_linux = 19.10`\n- `leap = 15.1`\n- `hci_compute_node_firmware`\n- `solidfire,_enterprise_sds_&_hci_storage_node`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2020:4011** · Red Hat · fixed in: Red Hat Enterprise Linux Client (v. 7), Red Hat Enterprise Linux Client Optional (v. 7), Red Hat Enterprise Linux ComputeNode (v. 7), Red Hat Enterprise Linux ComputeNode Optional (v. 7), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux Server Optional (v. 7), … · released 2020-09-29 · [advisory](https://access.redhat.com/errata/RHSA-2020:4011)\n- **RHSA-2021:0949** · Red Hat · fixed in: OpenShift Do 1 · released 2021-03-22 · [advisory](https://access.redhat.com/errata/RHSA-2021:0949)\n- **RHSA-2020:1913** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 8) · released 2020-04-28 · [advisory](https://access.redhat.com/errata/RHSA-2020:1913)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6 · no fix planned: Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6 · updated 2026-10-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-5188.json)","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}