The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade util-linux | Jul 30, 2024 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade util-linuxUpgrade libblkid-develUpgrade libmountUpgrade libuuid-develUpgrade libuuidUpgrade uuiddUpgrade libblkid | Nov 30, 2017 | Apr 11, 2017 |
| Oracle_linux | — | Upgrade libblkidUpgrade libuuidUpgrade util-linuxUpgrade libmount-develUpgrade libblkid-develUpgrade uuiddUpgrade libuuid-develUpgrade libmount | Nov 9, 2016 | Jul 11, 2016 |
| Redhat_linux | — | Upgrade libblkidUpgrade uuiddUpgrade libuuidUpgrade util-linux-debuginfoUpgrade util-linuxUpgrade libmountUpgrade libuuid-develUpgrade libblkid-develUpgrade libmount-develNo solution exists | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade util-linux-langUpgrade python-libmountUpgrade libblkid1-32bitUpgrade libuuid-develUpgrade libsmartcols-develUpgrade libfdisk-develUpgrade libuuid-devel-staticUpgrade util-linuxUpgrade sles12-docker-imageUpgrade libfdisk1Upgrade sles12sp2-docker-imageUpgrade libblkid-develUpgrade libblkid-devel-staticUpgrade libuuid1Upgrade libmount1-32bitUpgrade sles12sp1-docker-imageUpgrade util-linux-systemdUpgrade libuuid1-32bitUpgrade libsmartcols1Upgrade uuiddUpgrade libblkid1Upgrade libmount1Upgrade libmount-devel | Nov 10, 2016 | Nov 3, 2016 |
| Ubuntu | — | Upgrade libblkid1 (Ubuntu Pro)Upgrade util-linux (Ubuntu Pro) | Mar 22, 2023 | Apr 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub