A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-shadow | Jul 27, 2018 | Jul 27, 2018 | |
| Amazon_linux | — | amazon-linux-upgrade-util-linux | May 3, 2017 | Feb 23, 2017 |
| Centos_linux | — | centos-upgrade-coreutilscentos-upgrade-coreutils-debuginfocentos-upgrade-coreutils-libscentos-upgrade-libblkidcentos-upgrade-libblkid-develcentos-upgrade-libmountcentos-upgrade-libmount-develcentos-upgrade-libuuidcentos-upgrade-libuuid-develcentos-upgrade-util-linuxcentos-upgrade-util-linux-debuginfocentos-upgrade-uuidd | Apr 13, 2017 | Feb 23, 2017 |
| Debian | debian-upgrade-coreutilsdebian-upgrade-shadowdebian-upgrade-util-linux | Feb 25, 2017 | Feb 23, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-apps-shadow | Oct 30, 2017 | Jun 6, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-libblkidhuawei-euleros-2_0_sp1-upgrade-libblkid-develhuawei-euleros-2_0_sp1-upgrade-libmounthuawei-euleros-2_0_sp1-upgrade-libuuidhuawei-euleros-2_0_sp1-upgrade-libuuid-develhuawei-euleros-2_0_sp1-upgrade-util-linuxhuawei-euleros-2_0_sp1-upgrade-uuidd | Oct 11, 2019 | Jul 27, 2018 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-libblkidhuawei-euleros-2_0_sp2-upgrade-libblkid-develhuawei-euleros-2_0_sp2-upgrade-libmounthuawei-euleros-2_0_sp2-upgrade-libuuidhuawei-euleros-2_0_sp2-upgrade-libuuid-develhuawei-euleros-2_0_sp2-upgrade-util-linuxhuawei-euleros-2_0_sp2-upgrade-uuidd | Oct 11, 2019 | Jul 27, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-coreutilsoracle-linux-upgrade-coreutils-libsoracle-linux-upgrade-libblkidoracle-linux-upgrade-libblkid-develoracle-linux-upgrade-libmountoracle-linux-upgrade-libmount-develoracle-linux-upgrade-libuuidoracle-linux-upgrade-libuuid-develoracle-linux-upgrade-util-linuxoracle-linux-upgrade-uuidd | Mar 28, 2017 | Feb 22, 2017 |
| Redhat_linux | — | redhat-upgrade-coreutilsredhat-upgrade-coreutils-debuginforedhat-upgrade-coreutils-libsredhat-upgrade-libblkidredhat-upgrade-libblkid-develredhat-upgrade-libmountredhat-upgrade-libmount-develredhat-upgrade-libuuidredhat-upgrade-libuuid-develredhat-upgrade-util-linuxredhat-upgrade-util-linux-debuginforedhat-upgrade-uuidd | Mar 23, 2017 | Feb 23, 2017 |
| Suse | — | suse-upgrade-coreutilssuse-upgrade-coreutils-langsuse-upgrade-coreutils-x86suse-upgrade-libblkid-develsuse-upgrade-libblkid-devel-staticsuse-upgrade-libblkid1suse-upgrade-libblkid1-32bitsuse-upgrade-libfdisk-develsuse-upgrade-libfdisk1suse-upgrade-libmount-develsuse-upgrade-libmount1suse-upgrade-libmount1-32bitsuse-upgrade-libsmartcols-develsuse-upgrade-libsmartcols1suse-upgrade-libuuid-develsuse-upgrade-libuuid-devel-staticsuse-upgrade-libuuid1suse-upgrade-libuuid1-32bitsuse-upgrade-python-libmountsuse-upgrade-sles12-docker-imagesuse-upgrade-sles12sp1-docker-imagesuse-upgrade-sles12sp2-docker-imagesuse-upgrade-util-linuxsuse-upgrade-util-linux-langsuse-upgrade-util-linux-systemdsuse-upgrade-uuidd | Feb 24, 2017 | Feb 23, 2017 |
| Ubuntu | ubuntu-upgrade-loginubuntu-upgrade-passwdubuntu-upgrade-uidmap | May 5, 2017 | Feb 23, 2017 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 27, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub