The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.
CVSS Details
- CVSS 3.1 Base Score: 3.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade glibc-utilsUpgrade nscdUpgrade glibc-headersUpgrade nptl-develUpgrade glibc-develUpgrade glibc-profileUpgrade glibc-commonUpgrade glibc | Dec 1, 2016 | Apr 9, 2011 |
| Debian | — | Upgrade glibc | Jul 30, 2024 | Apr 10, 2011 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Apr 9, 2011 |
| Oracle_linux | — | Upgrade glibc-commonUpgrade glibc-utilsUpgrade nscdUpgrade glibc-staticUpgrade glibc-develUpgrade glibcUpgrade glibc-headers | Oct 16, 2024 | Apr 10, 2011 |
| Suse | — | Upgrade glibc-htmlUpgrade glibc-devel-64bitUpgrade glibc-develUpgrade glibc-devel-32bitUpgrade glibc-dceextUpgrade glibc-dceext-64bitUpgrade glibc-profile-64bitUpgrade glibcUpgrade glibc-i18ndataUpgrade glibc-localeUpgrade glibc-locale-32bitUpgrade glibc-dceext-x86Upgrade glibc-64bitUpgrade ncpfs-develUpgrade glibc-x86Upgrade glibc-locale-x86Upgrade ncpfsUpgrade glibc-dceext-32bitUpgrade ncpfs-32bitUpgrade nscdUpgrade glibc-profile-32bitUpgrade glibc-profileUpgrade glibc-infoUpgrade glibc-locale-64bitUpgrade glibc-profile-x86Upgrade glibc-32bit | Dec 12, 2013 | Apr 9, 2011 |
| Ubuntu | — | Upgrade libc6Upgrade libc-bin | Nov 8, 2024 | Apr 10, 2011 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Apr 9, 2011 |
| Vmsa 2012 0018 | — | Upgrade VMware ESXi 5.1 to build number 911593Upgrade VMware ESXi 5.0 to build number 912577 | Jan 4, 2013 | Apr 9, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub