The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
CVSS Details
- CVSS 3.1 Base Score: 4.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade util-linux | Jul 30, 2024 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade uuiddUpgrade libblkidUpgrade libuuidUpgrade libuuid-develUpgrade libblkid-develUpgrade libmountUpgrade util-linux | Nov 30, 2017 | Apr 11, 2017 |
| Oracle_linux | — | Upgrade libblkidUpgrade libuuidUpgrade util-linuxUpgrade libmount-develUpgrade libblkid-develUpgrade uuiddUpgrade libmountUpgrade libuuid-devel | Nov 9, 2016 | Jul 11, 2016 |
| Redhat_linux | — | Upgrade libuuidUpgrade libblkidUpgrade uuiddUpgrade libmount-develUpgrade libblkid-develUpgrade util-linuxUpgrade util-linux-debuginfoNo solution existsUpgrade libmountUpgrade libuuid-devel | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade util-linux-systemdUpgrade libuuid1-32bitUpgrade sles12sp1-docker-imageUpgrade libmount-develUpgrade libsmartcols1Upgrade uuiddUpgrade libmount1-32bitUpgrade libblkid1Upgrade libmount1Upgrade util-linuxUpgrade libsmartcols-develUpgrade libblkid1-32bitUpgrade libuuid-develUpgrade sles12-docker-imageUpgrade libfdisk1Upgrade python-libmountUpgrade libuuid1Upgrade libblkid-devel-staticUpgrade libfdisk-develUpgrade util-linux-langUpgrade libuuid-devel-staticUpgrade sles12sp2-docker-imageUpgrade libblkid-devel | Nov 10, 2016 | Nov 3, 2016 |
| Ubuntu | — | Upgrade util-linux (Ubuntu Pro)Upgrade libblkid1 (Ubuntu Pro) | Mar 22, 2023 | Apr 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub