An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Mar 26, 2024 | Jul 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade util-linux-userUpgrade python-libmountUpgrade libsmartcols-develUpgrade libblkidUpgrade libmountUpgrade util-linux-debuginfoUpgrade libsmartcolsUpgrade libuuidUpgrade libmount-develUpgrade libfdiskUpgrade uuiddUpgrade libblkid-develUpgrade util-linuxUpgrade libuuid-develUpgrade libfdisk-devel | Feb 7, 2023 | Jul 30, 2021 |
| Debian | — | Upgrade util-linux | Apr 8, 2024 | Jul 30, 2021 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libuuid-develUpgrade util-linuxUpgrade libmountUpgrade libblkid-develUpgrade uuiddUpgrade libblkidUpgrade libuuid | Oct 26, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade uuiddUpgrade libuuidUpgrade libblkidUpgrade libuuid-develUpgrade libblkid-develUpgrade libmountUpgrade util-linux | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade uuiddUpgrade util-linuxUpgrade libfdisk-develUpgrade libuuidUpgrade libblkid-develUpgrade libfdiskUpgrade libblkidUpgrade libsmartcols-develUpgrade libmountUpgrade util-linux-userUpgrade libsmartcolsUpgrade libuuid-devel | Nov 2, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmartcolsUpgrade libfdiskUpgrade util-linux-userUpgrade libuuidUpgrade util-linuxUpgrade libmountUpgrade libblkid | Nov 12, 2021 | Jul 30, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2021 |
| Suse | — | Upgrade libsmartcols-develUpgrade libuuid-develUpgrade libsmartcols1-32bitUpgrade libfdisk1Upgrade libsmartcols1Upgrade libmount1Upgrade libfdisk1-32bitUpgrade libblkid-devel-32bitUpgrade util-linux-langUpgrade python-libmountUpgrade libblkid1Upgrade libblkid-devel-staticUpgrade libuuid1Upgrade libuuid-devel-staticUpgrade libmount-devel-32bitUpgrade libblkid-develUpgrade libfdisk-devel-32bitUpgrade libmount-devel-staticUpgrade libsmartcols-devel-32bitUpgrade libfdisk-devel-staticUpgrade libmount1-32bitUpgrade libblkid1-32bitUpgrade libfdisk-develUpgrade python3-libmountUpgrade util-linuxUpgrade libuuid1-32bitUpgrade uuiddUpgrade libsmartcols-devel-staticUpgrade libuuid-devel-32bitUpgrade libmount-develUpgrade util-linux-systemd | Oct 20, 2021 | Jul 30, 2021 |
| Ubuntu | — | Upgrade util-linux | Nov 19, 2024 | Jul 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub