An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Mar 26, 2024 | Jul 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libuuid-develUpgrade libfdisk-develUpgrade libmount-develUpgrade libuuidUpgrade util-linuxUpgrade libblkid-develUpgrade libfdiskUpgrade uuiddUpgrade python-libmountUpgrade libsmartcolsUpgrade util-linux-userUpgrade libmountUpgrade libsmartcols-develUpgrade util-linux-debuginfoUpgrade libblkid | Feb 7, 2023 | Jul 30, 2021 |
| Debian | — | Upgrade util-linux | Apr 8, 2024 | Jul 30, 2021 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libmountUpgrade libblkid-develUpgrade util-linuxUpgrade libuuid-develUpgrade libuuidUpgrade uuiddUpgrade libblkid | Oct 26, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libblkidUpgrade libuuidUpgrade uuiddUpgrade libuuid-develUpgrade libmountUpgrade libblkid-develUpgrade util-linux | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade uuiddUpgrade util-linuxUpgrade libuuid-develUpgrade libuuidUpgrade libfdisk-develUpgrade libsmartcols-develUpgrade libblkid-develUpgrade util-linux-userUpgrade libfdiskUpgrade libblkidUpgrade libsmartcolsUpgrade libmount | Nov 2, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmartcolsUpgrade libfdiskUpgrade util-linuxUpgrade libblkidUpgrade libmountUpgrade libuuidUpgrade util-linux-user | Nov 12, 2021 | Jul 30, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2021 |
| Suse | — | Upgrade libblkid-devel-32bitUpgrade libblkid1Upgrade libblkid-devel-staticUpgrade libmount-devel-32bitUpgrade util-linux-langUpgrade libfdisk1-32bitUpgrade libblkid-develUpgrade libuuid1Upgrade libsmartcols-develUpgrade libsmartcols1-32bitUpgrade libmount1Upgrade libfdisk1Upgrade libsmartcols1Upgrade libuuid-devel-staticUpgrade libuuid-develUpgrade python-libmountUpgrade libfdisk-devel-32bitUpgrade libuuid-devel-32bitUpgrade util-linux-systemdUpgrade libmount-develUpgrade libfdisk-develUpgrade libsmartcols-devel-32bitUpgrade libuuid1-32bitUpgrade python3-libmountUpgrade util-linuxUpgrade uuiddUpgrade libmount1-32bitUpgrade libfdisk-devel-staticUpgrade libblkid1-32bitUpgrade libmount-devel-staticUpgrade libsmartcols-devel-static | Oct 20, 2021 | Jul 30, 2021 |
| Ubuntu | — | Upgrade util-linux | Nov 19, 2024 | Jul 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub