Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a cra…

Exploit prediction (EPSS)

4.11% probability of exploitation in the next 30 days, higher than 91% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-189 Numeric Errors

References

• secunia.com /advisories/27965 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securitytracker.com /id?1019537 · vdb-entry, x_refsource_SECTRACK, x_transferred
• securityfocus.com /bid/26772 · vdb-entry, x_refsource_BID, x_transferred
• vmware.com /security/advisories/VMSA-2008-0004.html · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/28541 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/28000 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/38903 · vdb-entry, x_refsource_XF, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10399 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• itrc.hp.com /service/cki/docDisplay.do?docId=emr_na-c02286083 · vendor-advisory, x_refsource_HP, x_transferred
• redhat.com /support/errata/RHSA-2008-0003.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• vupen.com /english/advisories/2007/4135 · vdb-entry, x_refsource_VUPEN, x_transferred
• securityfocus.com /archive/1/487999/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• secunia.com /advisories/28042 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/489082/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• secunia.com /advisories/29224 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• redhat.com /archives/fedora-package-announce/2008-January/msg00629.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• secunia.com /advisories/40551 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• debian.org /security/2007/dsa-1422 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• novell.com /linux/security/advisories/2007_25_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
• secunia.com /advisories/27987 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/28030 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2008/0761 · vdb-entry, x_refsource_VUPEN, x_transferred
• support.citrix.com /article/CTX118766 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/27889 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/28648 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2010/1796 · vdb-entry, x_refsource_VUPEN, x_transferred
• ubuntu.com /usn/usn-555-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• secunia.com /advisories/28360 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• sourceforge.net /project/shownotes.php?release_id=560230&group_id=2406 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/32774 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• issues.rpath.com /browse/RPL-2011 · x_refsource_CONFIRM, x_transferred
• redhat.com /archives/fedora-package-announce/2008-January/msg00618.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• lists.vmware.com /pipermail/security-announce/2008/000007.html · mailing-list, x_refsource_MLIST, x_transferred
• support.avaya.com /elmodocs2/security/ASA-2008-040.htm · x_refsource_CONFIRM, x_transferred
• wiki.rpath.com /Advisories:rPSA-2007-0262 · x_refsource_CONFIRM, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2007:242 · vendor-advisory, x_refsource_MANDRIVA, x_transferred

Sources

• CVE List: CVE-2007-5497
• NVD: CVE-2007-5497

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.