The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade util-linux | Jul 30, 2024 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade uuiddUpgrade libblkidUpgrade libuuid-develUpgrade libuuidUpgrade util-linuxUpgrade libmountUpgrade libblkid-devel | Nov 30, 2017 | Apr 11, 2017 |
| Oracle_linux | — | Upgrade uuiddUpgrade util-linuxUpgrade libblkid-develUpgrade libmount-develUpgrade libblkidUpgrade libuuidUpgrade libmountUpgrade libuuid-devel | Nov 9, 2016 | Jul 11, 2016 |
| Redhat_linux | — | Upgrade libuuidUpgrade libblkidUpgrade uuiddUpgrade libblkid-develUpgrade libmount-develUpgrade util-linux-debuginfoNo solution existsUpgrade libmountUpgrade libuuid-develUpgrade util-linux | Nov 4, 2016 | Nov 3, 2016 |
| Suse | — | Upgrade sles12-docker-imageUpgrade libsmartcols-develUpgrade util-linux-langUpgrade libuuid-devel-staticUpgrade libblkid-develUpgrade libblkid-devel-staticUpgrade libuuid1Upgrade libfdisk-develUpgrade util-linuxUpgrade sles12sp2-docker-imageUpgrade python-libmountUpgrade libuuid-develUpgrade libblkid1-32bitUpgrade libfdisk1Upgrade libblkid1Upgrade libmount1Upgrade util-linux-systemdUpgrade libuuid1-32bitUpgrade uuiddUpgrade libmount-develUpgrade libmount1-32bitUpgrade libsmartcols1Upgrade sles12sp1-docker-image | Nov 10, 2016 | Nov 3, 2016 |
| Ubuntu | — | Upgrade libblkid1 (Ubuntu Pro)Upgrade util-linux (Ubuntu Pro) | Mar 22, 2023 | Apr 11, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub