UDisks 2.8.0 has a format string vulnerability in udisks_log in udiskslogging.c, allowing attackers to obtain sensitive information (stack contents), cause a denial of service (memory corruption), or possibly have unspecified other impact via a malformed filesystem label, as demonstrated by %d or %n substrings.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade libudisks2Upgrade udisks2-lsmUpgrade udisks2Upgrade libudisks2-develUpgrade udisks2-iscsiUpgrade udisks2-lvm2Upgrade udisks2-debuginfo | Apr 27, 2020 | Sep 22, 2018 |
| Centos_linux | — | Upgrade udisks2-debuginfoUpgrade udisks2Upgrade udisks2-lsmUpgrade udisks2-iscsiUpgrade libudisks2Upgrade udisks2-lvm2Upgrade libudisks2-devel | Aug 28, 2019 | Sep 22, 2018 |
| Debian | — | Upgrade udisks2 | Jul 30, 2024 | Sep 22, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade udisks2Upgrade libudisks2 | Nov 19, 2019 | Sep 22, 2018 |
| Oracle_linux | — | Upgrade udisks2-lsmUpgrade libudisks2-develUpgrade udisks2-lvm2Upgrade udisks2-iscsiUpgrade libudisks2Upgrade udisks2 | Jul 21, 2020 | Sep 22, 2018 |
| Redhat_linux | — | Upgrade udisks2-lsmUpgrade udisks2-iscsiUpgrade udisks2Upgrade libudisks2Upgrade udisks2-debuginfoUpgrade libudisks2-develUpgrade udisks2-lvm2No solution exists | Aug 7, 2019 | Sep 22, 2018 |
| Suse | — | Upgrade libudisks2-0Upgrade libudisks2-0-develUpgrade typelib-1_0-udisks-2_0Upgrade udisks2-langUpgrade udisks2Upgrade udisks2-devel | Oct 25, 2018 | Sep 22, 2018 |
| Ubuntu | — | Upgrade udisks2 | Oct 2, 2018 | Sep 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub