Search for packages
| purl | pkg:deb/ubuntu/util-linux@2.14.2-1ubuntu2 |
| Next non-vulnerable version | 2.33.1-0.1ubuntu2 |
| Latest non-vulnerable version | 2.33.1-0.1ubuntu2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1nfm-u84m-aaas
Aliases: CVE-2013-0157 |
(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists. |
Affected by 4 other vulnerabilities. |
|
VCID-48cm-kxb5-aaag
Aliases: CVE-2016-2779 |
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. |
Affected by 0 other vulnerabilities. |
|
VCID-74yh-5d45-aaab
Aliases: CVE-2011-1677 |
mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors. |
Affected by 6 other vulnerabilities. |
|
VCID-8zb2-em6r-aaan
Aliases: CVE-2014-9114 |
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. |
Affected by 4 other vulnerabilities. |
|
VCID-n9v7-sg5s-aaac
Aliases: (+ CVE-2017-2616 fix) regression |
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions. |
Affected by 3 other vulnerabilities. |
|
VCID-uyzj-6dz1-aaar
Aliases: CVE-2011-1676 |
CVE-2011-1676 util-linux: mount does not remove /etc/mtab.tmp after failed mount entry addition |
Affected by 6 other vulnerabilities. |
|
VCID-wm44-8e6d-aaag
Aliases: CVE-2011-1675 |
mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. |
Affected by 6 other vulnerabilities. |
|
VCID-xgvn-7emk-aaaj
Aliases: CVE-2018-7738 |
In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion. |
Affected by 0 other vulnerabilities. |
|
VCID-xkfe-mpjz-aaap
Aliases: CVE-2016-5011 |
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|