p PatchFirst

CVE-2007-5191

CVE-2007-5191

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.

EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • util-linux Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.13-8

    Update to 2.13-8

  • util-linux Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.13-8

    Update to 2.13-8

  • util-linux Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.13-8

    Update to 2.13-8

Original sources

Check your server →