An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Mar 26, 2024 | Jul 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libfdisk-develUpgrade libblkid-develUpgrade util-linuxUpgrade libmount-develUpgrade uuiddUpgrade libfdiskUpgrade libuuid-develUpgrade libuuidUpgrade util-linux-userUpgrade libmountUpgrade python-libmountUpgrade libblkidUpgrade util-linux-debuginfoUpgrade libsmartcols-develUpgrade libsmartcols | Feb 7, 2023 | Jul 30, 2021 |
| Debian | — | Upgrade util-linux | Apr 8, 2024 | Jul 30, 2021 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libuuid-develUpgrade libblkid-develUpgrade libmountUpgrade util-linuxUpgrade libuuidUpgrade libblkidUpgrade uuidd | Oct 26, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libuuid-develUpgrade util-linuxUpgrade libmountUpgrade libblkid-develUpgrade libuuidUpgrade libblkidUpgrade uuidd | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libuuid-develUpgrade util-linuxUpgrade libuuidUpgrade libfdisk-develUpgrade uuiddUpgrade libmountUpgrade libfdiskUpgrade util-linux-userUpgrade libsmartcolsUpgrade libblkid-develUpgrade libsmartcols-develUpgrade libblkid | Nov 2, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libfdiskUpgrade libsmartcolsUpgrade util-linux-userUpgrade libmountUpgrade libuuidUpgrade util-linuxUpgrade libblkid | Nov 12, 2021 | Jul 30, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2021 |
| Suse | — | Upgrade libmount-develUpgrade libsmartcols-devel-staticUpgrade libuuid1-32bitUpgrade uuiddUpgrade libmount1-32bitUpgrade libfdisk-devel-staticUpgrade libblkid1-32bitUpgrade libsmartcols-devel-32bitUpgrade util-linuxUpgrade libuuid-devel-32bitUpgrade util-linux-systemdUpgrade libfdisk-devel-32bitUpgrade python3-libmountUpgrade libfdisk-develUpgrade libmount-devel-staticUpgrade libsmartcols-develUpgrade libfdisk1-32bitUpgrade libuuid-develUpgrade libuuid-devel-staticUpgrade libsmartcols1-32bitUpgrade libblkid-develUpgrade libblkid-devel-32bitUpgrade libblkid-devel-staticUpgrade libmount1Upgrade libmount-devel-32bitUpgrade python-libmountUpgrade util-linux-langUpgrade libuuid1Upgrade libblkid1Upgrade libsmartcols1Upgrade libfdisk1 | Oct 20, 2021 | Jul 30, 2021 |
| Ubuntu | — | Upgrade util-linux | Nov 19, 2024 | Jul 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub