Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5478-1
HistoryJun 14, 2022 - 12:00 a.m.

util-linux vulnerability

2022-06-1400:00:00
ubuntu.com
41
ubuntu
util-linux
libblkid
vulnerability
denial of service
msdos partition table
memory management

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.1

Confidence

High

EPSS

0.002

Percentile

53.1%

JSON

Releases

  • Ubuntu 16.04 ESM

Packages

  • util-linux - miscellaneous system utilities

Details

Christian Moch and Michael Gruhn discovered that the libblkid library
of util-linux did not properly manage memory under certain
circumstances. A local attacker could possibly use this issue
to cause denial of service by consuming all memory through
a specially crafted MSDOS partition table.

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchutil-linux< 2.27.1-6ubuntu3.10+esm2UNKNOWN
Ubuntu16.04noarchbsdutils< 1:2.27.1-6ubuntu3.10UNKNOWN
Ubuntu16.04noarchbsdutils-dbgsym< 1:2.27.1-6ubuntu3.10UNKNOWN
Ubuntu16.04noarchfdisk-udeb< 2.27.1-6ubuntu3.10UNKNOWN
Ubuntu16.04noarchfdisk-udeb-dbgsym< 2.27.1-6ubuntu3.10UNKNOWN
Ubuntu16.04noarchlibblkid-dev< 2.27.1-6ubuntu3.10UNKNOWN
Ubuntu16.04noarchlibblkid1< 2.27.1-6ubuntu3.10UNKNOWN
Ubuntu16.04noarchlibblkid1-dbgsym< 2.27.1-6ubuntu3.10UNKNOWN
Ubuntu16.04noarchlibblkid1-udeb< 2.27.1-6ubuntu3.10UNKNOWN
Ubuntu16.04noarchlibblkid1-udeb-dbgsym< 2.27.1-6ubuntu3.10UNKNOWN
Rows per page:
1-10 of 381

Related

cvelist 1
redhat 1
osv 2
nessus 16
veracode 1
debiancve 1
ubuntucve 1
centos 1
openvas 10
ibm 2
oraclelinux 1
cve 1
prion 1
mageia 1
redhatcve 1
nvd 1
suse 4
photon 2
rosalinux 1
cvelist
cvelist
CVE-2016-5011
2017-04-11 15:00:00
redhat
redhat
(RHSA-2016:2605) Low: util-linux security, bug fix, and enhancement update
2016-11-03 06:07:16
osv
osv
CVE-2016-5011
2017-04-11 15:59:00
util-linux vulnerability
2022-06-14 22:50:13
nessus
nessus
SUSE SLED12 / SLES12 Security Update : util-linux (SUSE-SU-2016:2954-1)
2016-12-01 00:00:00
SUSE SLED12 / SLES12 Security Update : util-linux (SUSE-SU-2016:2764-1)
2016-11-10 00:00:00
EulerOS 2.0 SP1 : util-linux (EulerOS-SA-2016-1068)
2017-05-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-11-14 01:15:57
debiancve
debiancve
CVE-2016-5011
2017-04-11 15:59:00
ubuntucve
ubuntucve
CVE-2016-5011
2017-04-11 00:00:00
centos
centos
libblkid, libmount, libuuid, util, uuidd security update
2016-11-25 15:50:43
openvas
openvas
RedHat Update for util-linux RHSA-2016:2605-02
2016-11-04 00:00:00
Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2016-1068)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2016-0256)
2022-01-28 00:00:00
ibm
ibm
Security Bulletin: A vulnerability in util-linux affects PowerKVM (CVE-2016-5011)
2018-06-18 01:34:15
Security Bulletin: Vulnerabilities in util-linux affect Power Hardware Management Console (‪CVE-2016-5011‬‬)
2021-09-23 01:31:39
oraclelinux
oraclelinux
util-linux security, bug fix, and enhancement update
2016-11-09 00:00:00
cve
cve
CVE-2016-5011
2017-04-11 15:59:00
prion
prion
Design/Logic Flaw
2017-04-11 15:59:00
mageia
mageia
Updated util-linux packages fix security vulnerability
2016-07-14 23:33:59
redhatcve
redhatcve
CVE-2016-5011
2016-07-11 11:18:18
nvd
nvd
CVE-2016-5011
2017-04-11 15:59:00
suse
suse
Security update for util-linux (important)
2017-02-23 12:09:03
Security update for SLES 12-SP2 Docker image (important)
2017-10-11 03:08:09
Security update for SLES 12 Docker image (important)
2017-10-11 03:06:53
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0330
2020-10-09 00:00:00
Important Photon OS Security Update - PHSA-2020-0330
2020-10-09 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1992
2021-07-02 18:18:58

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.1

Confidence

High

EPSS

0.002

Percentile

53.1%

JSON
Related for USN-5478-1
cvelist1redhat1osv2nessus16veracode1debiancve1ubuntucve1centos1openvas10ibm2oraclelinux1cve1prion1mageia1redhatcve1nvd1suse4photon2rosalinux1