Homepage

Out-of-bounds Write The advisory has been revoked - it doesn't affect any version of package uuidd  (opens in a new tab)

Threat Intelligence

EPSS
1.11% (62nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL6-UUIDD-1397766
  • published26 Jul 2021
  • disclosed27 Aug 2019
Report a new vulnerability Found a mistake?

Introduced: 27 Aug 2019

CVE-2019-5094  (opens in a new tab)
CWE-787  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:6.

NVD Description

Note: Versions mentioned in the description apply only to the upstream uuidd package and not the uuidd package as distributed by RHEL.

An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

References