Lucene search

K
cve[email protected]CVE-2011-1675
HistoryApr 10, 2011 - 2:55 a.m.

CVE-2011-1675

2011-04-1002:55:01
CWE-399
web.nvd.nist.gov
39
cve
2011
1675
util-linux
/etc/mtab
local users
resource limits

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Affected configurations

NVD
Node
linuxutil-linuxRange2.19
OR
linuxutil-linuxMatch2.2
OR
linuxutil-linuxMatch2.5
OR
linuxutil-linuxMatch2.7
OR
linuxutil-linuxMatch2.8
OR
linuxutil-linuxMatch2.9
OR
linuxutil-linuxMatch2.10
OR
linuxutil-linuxMatch2.11
OR
linuxutil-linuxMatch2.12
OR
linuxutil-linuxMatch2.12pre
OR
linuxutil-linuxMatch2.13
OR
linuxutil-linuxMatch2.13pre
OR
linuxutil-linuxMatch2.14
OR
linuxutil-linuxMatch2.15
OR
linuxutil-linuxMatch2.16
OR
linuxutil-linuxMatch2.17
OR
linuxutil-linuxMatch2.18

References

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:P/A:N

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%