CVE-2019-5188: Canonical Ubuntu Linux

Medium severity, CVSS 6.7. EPSS: 1% chance of exploitation in the next 30 days.

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 18.04 only; version 19.04 only; version 19.10 only
• Debian Debian Linux: version 8.0 only; version 9.0 only
• e2fsprogs Project e2fsprogs: from 1.43.3, up to and including 1.45.4
• Fedoraproject Fedora: version 30 only; version 31 only
• Netapp Hci Compute Node Firmware: affected versions not specified
• Netapp Solidfire, Enterprise Sds & Hci Storage Node: affected versions not specified
• Opensuse Leap: version 15.1 only

Published 2020-01-08. Last modified 2026-06-17.