An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Mar 26, 2024 | Jul 28, 2021 |
| Amazon Linux Ami 2 | — | Upgrade libuuid-develUpgrade libfdiskUpgrade libuuidUpgrade uuiddUpgrade libfdisk-develUpgrade util-linuxUpgrade libmount-develUpgrade libblkid-develUpgrade libsmartcols-develUpgrade util-linux-debuginfoUpgrade libblkidUpgrade libsmartcolsUpgrade libmountUpgrade util-linux-userUpgrade python-libmount | Feb 7, 2023 | Jul 30, 2021 |
| Debian | — | Upgrade util-linux | Apr 8, 2024 | Jul 30, 2021 |
| Gentoo Linux | — | Upgrade sys-apps/util-linux. | Jan 8, 2024 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade uuiddUpgrade libblkidUpgrade libuuidUpgrade libmountUpgrade libblkid-develUpgrade util-linuxUpgrade libuuid-devel | Oct 26, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade util-linuxUpgrade libmountUpgrade libblkid-develUpgrade libuuid-develUpgrade uuiddUpgrade libuuidUpgrade libblkid | Nov 12, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libfdisk-develUpgrade libuuidUpgrade libuuid-develUpgrade util-linuxUpgrade uuiddUpgrade libmountUpgrade libblkid-develUpgrade libsmartcolsUpgrade util-linux-userUpgrade libfdiskUpgrade libblkidUpgrade libsmartcols-devel | Nov 2, 2021 | Jul 30, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libmountUpgrade libblkidUpgrade util-linuxUpgrade libuuidUpgrade util-linux-userUpgrade libsmartcolsUpgrade libfdisk | Nov 12, 2021 | Jul 30, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2021 |
| Suse | — | Upgrade libsmartcols-develUpgrade libsmartcols1-32bitUpgrade libuuid-develUpgrade libsmartcols1Upgrade libfdisk1Upgrade python-libmountUpgrade libuuid1Upgrade libblkid1Upgrade libmount1Upgrade libblkid-develUpgrade libblkid-devel-32bitUpgrade util-linux-langUpgrade libblkid-devel-staticUpgrade libuuid-devel-staticUpgrade libfdisk1-32bitUpgrade libmount-devel-32bitUpgrade libmount-develUpgrade util-linuxUpgrade libmount1-32bitUpgrade util-linux-systemdUpgrade libblkid1-32bitUpgrade libuuid1-32bitUpgrade libfdisk-devel-staticUpgrade libsmartcols-devel-32bitUpgrade libfdisk-develUpgrade libsmartcols-devel-staticUpgrade python3-libmountUpgrade uuiddUpgrade libuuid-devel-32bitUpgrade libmount-devel-staticUpgrade libfdisk-devel-32bit | Oct 20, 2021 | Jul 30, 2021 |
| Ubuntu | — | Upgrade util-linux | Nov 19, 2024 | Jul 30, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub