Advisories · Technology
util-linux.
Every CVE that names util-linux among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.0 High
util-linux libblkid DOS extended-partition overflow produces invalid partition metadata
- util-linux
- Memory corruption
- CVSS 7.0 High
util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass
- util-linux
- Privilege escalation
- CWE-807
- CVSS 7.0 High
util-linux mount target TOCTOU allows local privilege escalation
- util-linux
- Race condition
- CVSS 7.0 High
util-linux mount hook_owner TOCTOU allows local privilege escalation
- util-linux
- Race condition
- CVSS 8.5 High
util-linux libmount Privilege Escalation via Failed Mount Helper
- util-linux
- CWE-390
- CVSS 4.7 Medium
util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup
- util-linux
- Path traversal
- Privilege escalation
- CVSS 6.1 Medium
Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames
- util-linux
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 5.5 Medium
Files accessible to external parties in util-linux
- util-linux
- Information disclosure
-
Files accessible to external parties in util-linux
- util-linux
- Information disclosure
- CVSS 5.5 Medium
Sensitive information in error messages in util-linux
- util-linux
- Information disclosure
- CVSS 5.5 Medium
util-linux: A race condition was found in util-linux before 2.32.1 in the way su handled the…
- util-linux
- Privilege escalation