CVE-2015-5224
The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.
- Mettez à jour vers 2.27-1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de util-linux · Page n° 2
Vulnérabilités publiées pour util-linux au cours des 30 derniers jours : 4. Présentes dans le catalogue KEV : 0.
Vulnérabilités : 33
CVE-2016-5011
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
- Mettez à jour vers 2.28.1-1
Publication Mise à jourCVE-2014-9114
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
- Mettez à jour vers 2.25.2-4
Publication Mise à jourCVE-2016-2779
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
- Mettez à jour vers 2.31.1-0.1
Publication Mise à jourCVE-2015-5218
Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.
- Mettez à jour vers 2.27-1
Publication Mise à jourCVE-2013-0157
(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.
- Mettez à jour vers 2.20.1-5.5
Publication Mise à jourCVE-2011-1677
mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.
- Mettez à jour vers 2.20.1-1
Publication Mise à jourCVE-2011-1675
mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
- Mettez à jour vers 2.20.1-1
Publication Mise à jourCVE-2008-1926
Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."
- Mettez à jour vers 2.13.1.1-1
Publication Mise à jourCVE-2007-5191
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- Mettez à jour vers 2.13-8
Publication Mise à jourCVE-2006-7108
login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok.
- Mettez à jour vers 2.17.2-9
Publication Mise à jourCVE-2005-2876
umount in util-linux 2.8 to 2.12q, 2.13-pre1, and 2.13-pre2, and other packages such as loop-aes-utils, allows local users with unmount permissions to gain privileges via the -r (remount) option, which causes the file system to be remounted with just the read-only flag, which effectively clears the nosuid, nodev, and other flags.
- Mettez à jour vers 2.12p-8
Publication Mise à jourCVE-2001-1494
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
- Mettez à jour vers 2.11n-1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.