7.5

CVE-2019-5188: canonical ubuntu_linux Out-of-bounds Write

CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2019-5188MGASA-2020-0039SUSE-SU-2020:0265-1
Published 08-01-2020Last modified 14-10-2026
Open JSON

Vulnerability summary

CVE-2019-5188 is a high (CVSS 7.5) Out-of-bounds Write vulnerability in canonical ubuntu_linux. EPSS estimates a 1.08% chance of exploitation in the next 30 days, higher than 64.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
40/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
1.08%
0%100%
Low · +0.06 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 2
RHSA-2020:1913RHSA-2020:4011

Timeline

  1. 08-01-2020
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

1.08%

Chance of exploitation in the next 30 days

Percentile

65%

Versus all other CVEs

30-day change

+0.06 pp

From 1.03% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.08%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (talosintelligence.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Suse9 products
  • e2fsprogs&distro=SUSE Linux Enterprise Desktop 12 SP4< 1.43.8-3.11.1
  • e2fsprogs&distro=SUSE Linux Enterprise Module for Basesystem 15< 1.43.8-4.17.1
  • e2fsprogs&distro=SUSE Linux Enterprise Module for Basesystem 15 SP1< 1.43.8-4.17.1
  • e2fsprogs&distro=SUSE Linux Enterprise Server 12 SP4< 1.43.8-3.11.1
  • e2fsprogs&distro=SUSE Linux Enterprise Server 12 SP5< 1.43.8-3.11.1
Debian2 products
  • e2fsprogs< 1.42.12-2+deb8u2 | < 1.43.4-2+deb9u2 | < 1.45.5-1
  • debian_linuxEOL8.0 | 9.0
Netapp2 products
Opensuse2 products
  • leapEOL15.1
  • e2fsprogs&distro=openSUSE Leap 15.1< 1.43.8-lp151.5.12.1
Alpine1 product
  • e2fsprogs≥ 1.43.3, < 1.45.5-r0 | ≥ 1.43.3, < 1.44.2-r2 | ≥ 1.43.3, < 1.44.5-r2
Canonical1 product
  • ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 18.04 | 19.04 | 19.10
E2fsprogs_project1 product
Fedoraproject1 product
Mageia1 product
  • e2fsprogs< 1.45.5-1.mga7
Ubuntu1 product
  • e2fsprogs< 1.42.9-3ubuntu1.3+esm2 | < 1.42.13-1ubuntu1.2 | < 1.44.1-1ubuntu1.3

10 vendors · 21 products

References

23 links
Show all 23 references