Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor data in a filesystem image. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0247