Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202401-08
HistoryJan 07, 2024 - 12:00 a.m.

util-linux: Multiple Vulnerabilities

2024-01-0700:00:00
Gentoo Foundation
security.gentoo.org
12
util-linux
vulnerabilities
mount
umount
filesystems
cve
upgrade

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.7%

JSON

Background

util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.

Description

Multiple vulnerabilities have been discovered in util-linux. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All util-linux users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.37.4"
OSVersionArchitecturePackageVersionFilename
Gentooanyallsys-apps/util-linux< 2.37.4UNKNOWN

Related

mageia 1
nessus 59
openvas 48
redos 1
debian 2
osv 6
ubuntu 1
suse 3
fedora 2
photon 12
cbl_mariner 5
nvd 4
amazon 2
cve 4
debiancve 4
alpinelinux 4
cnvd 2
redhatcve 4
ubuntucve 4
cvelist 4
prion 4
slackware 1
veracode 3
packetstorm 1
zdt 1
thn 1
qualysblog 1
mmpc 1
mssecure 1
ibm 1
avleonov 1
ics 1
mageia
mageia
Updated util-linux packages fix security vulnerability
2022-02-22 23:15:16
nessus
nessus
GLSA-202401-08 : util-linux: Multiple Vulnerabilities
2024-01-07 00:00:00
Amazon Linux 2022 : (ALAS2022-2022-099)
2022-09-06 00:00:00
CentOS 9 : util-linux-2.37.4-3.el9
2024-02-29 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0076)
2022-02-23 00:00:00
Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-2041)
2022-07-14 00:00:00
Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-2069)
2022-07-14 00:00:00
redos
redos
ROS-20220128-03
2022-01-28 00:00:00
debian
debian
[SECURITY] [DSA 5055-1] util-linux security update
2022-01-24 11:31:30
[SECURITY] [DLA 3782-1] util-linux security update
2024-04-07 10:40:44
osv
osv
util-linux - security update
2022-01-24 00:00:00
util-linux vulnerabilities
2022-02-09 13:26:34
CVE-2021-3995
2022-08-23 20:15:08
ubuntu
ubuntu
util-linux vulnerabilities
2022-02-09 00:00:00
suse
suse
Security update for libeconf, shadow and util-linux (moderate)
2022-03-04 00:00:00
Security update for util-linux (moderate)
2021-11-02 00:00:00
Security update for util-linux (moderate)
2021-10-20 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: util-linux-2.37.3-1.fc35
2022-02-05 01:22:21
[SECURITY] Fedora 35 Update: util-linux-2.37.4-1.fc35
2022-02-16 01:28:56
photon
photon
Important Photon OS Security Update - PHSA-2022-0147
2022-01-27 00:00:00
Critical Photon OS Security Update - PHSA-2021-0081
2021-08-17 00:00:00
Critical Photon OS Security Update - PHSA-2021-0283
2021-08-13 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-37600 affecting package util-linux 2.32.1-7
2021-08-12 21:14:36
CVE-2022-0563 affecting package util-linux for versions less than 2.37.4-1
2022-06-26 03:29:31
CVE-2022-0563 affecting package util-linux 2.32.1-6
2022-05-12 02:16:39
nvd
nvd
CVE-2021-37600
2021-07-30 14:15:18
CVE-2022-0563
2022-02-21 19:15:08
CVE-2021-3996
2022-08-23 20:15:08
amazon
amazon
Low: util-linux
2023-01-30 16:02:00
Medium: util-linux
2022-12-01 20:32:00
cve
cve
CVE-2021-37600
2021-07-30 14:15:18
CVE-2022-0563
2022-02-21 19:15:08
CVE-2021-3996
2022-08-23 20:15:08
debiancve
debiancve
CVE-2021-37600
2021-07-30 14:15:18
CVE-2022-0563
2022-02-21 19:15:08
CVE-2021-3996
2022-08-23 20:15:08
alpinelinux
alpinelinux
CVE-2021-37600
2021-07-30 14:15:18
CVE-2022-0563
2022-02-21 19:15:08
CVE-2021-3995
2022-08-23 20:15:08
cnvd
cnvd
util-linux input validation error vulnerability
2021-08-03 00:00:00
util-linux has unspecified vulnerabilities
2022-02-16 00:00:00
redhatcve
redhatcve
CVE-2021-37600
2021-07-29 14:25:41
CVE-2022-0563
2022-02-14 19:43:17
CVE-2021-3996
2022-01-24 12:42:16
ubuntucve
ubuntucve
CVE-2021-37600
2021-07-30 00:00:00
CVE-2022-0563
2022-02-21 00:00:00
CVE-2021-3996
2022-02-01 00:00:00
cvelist
cvelist
CVE-2021-37600
2021-07-28 00:00:00
CVE-2021-3996
2022-08-23 00:00:00
CVE-2022-0563
2022-02-21 00:00:00
prion
prion
Integer overflow
2021-07-30 14:15:00
Privilege escalation
2022-02-21 19:15:00
Design/Logic Flaw
2022-08-23 20:15:00
slackware
slackware
[slackware-security] util-linux
2022-02-15 20:05:04
veracode
veracode
Denial Of Service (DoS)
2022-02-16 23:14:47
Denial Of Service (DoS)
2022-01-26 14:30:50
Denial Of Service (DoS)
2022-01-26 14:30:52
packetstorm
packetstorm
snap-confine must_mkdir_and_open_with_perms() Race Condition
2022-12-09 00:00:00
zdt
zdt
Ubuntu Server snap-confine must_mkdir_and_open_with_perms() Race Condition Vulnerability
2022-12-10 00:00:00
thn
thn
New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager
2022-02-18 08:37:00
qualysblog
qualysblog
Oh Snap! More Lemmings: Local Privilege Escalation Vulnerability Discovered in snap-confine (CVE-2021-44731)
2022-02-17 19:15:55
mmpc
mmpc
Uncursing the ncurses: Memory corruption vulnerabilities found in library
2023-09-14 11:30:00
mssecure
mssecure
Uncursing the ncurses: Memory corruption vulnerabilities found in library
2023-09-14 11:30:00
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct for UNIX Certified Container is affected by multiple vulnerabilities in Red Hat Universal Base Image version 8.4-206.1626828523 and Binutils version 2.30-93
2022-03-14 20:12:12
avleonov
avleonov
Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs
2022-12-30 18:03:13
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.7%

JSON
Related for GLSA-202401-08
mageia1nessus59openvas48redos1debian2osv6ubuntu1suse3fedora2photon12cbl_mariner5nvd4amazon2cve4debiancve4alpinelinux4cnvd2redhatcve4ubuntucve4cvelist4prion4slackware1veracode3packetstorm1zdt1thn1qualysblog1mmpc1mssecure1ibm1avleonov1ics1