{"id":"CVE-2019-5094","revision":"5181d3b549884bc7b705d4af0bed3d5c","records":[{"revision":"5181d3b549884bc7b705d4af0bed3d5c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2019-5094","aliases":[],"title":"An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a …","description":"An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.","state":0,"publishedAt":"2019-09-24T21:21:27+00:00","modifiedAt":"2026-10-14T06:35:37.415+00:00","affected":[{"ecosystem":"Vendor product","name":"E2fsprogs","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"E2fsprogs\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"E2fsprogs 1.43.3 - 1.45.3\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","score":7.5,"severity":"HIGH"}],"references":["https://www.debian.org/security/2019/dsa-4535","https://lists.debian.org/debian-lts-announce/2019/09/msg00029.html","https://seclists.org/bugtraq/2019/Sep/58","https://usn.ubuntu.com/4142-2/","https://usn.ubuntu.com/4142-1/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AKETJ6BREDUHRWQTV35SPGG5C6H7KSI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6DOBCYQKCTTWXBLMUPJ5TX3FY7JNCOKY/","https://security.gentoo.org/glsa/202003-05","https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887","https://security.netapp.com/advisory/ntap-20200115-0002/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2019-5094","license":"CVE Program Terms of Use","key":"cve-program:CVE-2019-5094","identifiers":["CVE-2019-5094"]},"retained":false,"historicalAffected":[]}],"coverage":[]}