vulnerability

SUSE: CVE-2021-37600: SUSE Linux Security Advisory

Severity
1
CVSS
(AV:L/AC:H/Au:N/C:N/I:N/A:P)
Published
2021-07-30
Added
2021-10-20
Modified
2022-10-26

Description

** DISPUTED ** An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.

Solution(s)

suse-upgrade-libblkid-develsuse-upgrade-libblkid-devel-32bitsuse-upgrade-libblkid-devel-staticsuse-upgrade-libblkid1suse-upgrade-libblkid1-32bitsuse-upgrade-libfdisk-develsuse-upgrade-libfdisk-devel-32bitsuse-upgrade-libfdisk-devel-staticsuse-upgrade-libfdisk1suse-upgrade-libfdisk1-32bitsuse-upgrade-libmount-develsuse-upgrade-libmount-devel-32bitsuse-upgrade-libmount-devel-staticsuse-upgrade-libmount1suse-upgrade-libmount1-32bitsuse-upgrade-libsmartcols-develsuse-upgrade-libsmartcols-devel-32bitsuse-upgrade-libsmartcols-devel-staticsuse-upgrade-libsmartcols1suse-upgrade-libsmartcols1-32bitsuse-upgrade-libuuid-develsuse-upgrade-libuuid-devel-32bitsuse-upgrade-libuuid-devel-staticsuse-upgrade-libuuid1suse-upgrade-libuuid1-32bitsuse-upgrade-python-libmountsuse-upgrade-python3-libmountsuse-upgrade-util-linuxsuse-upgrade-util-linux-langsuse-upgrade-util-linux-systemdsuse-upgrade-uuidd
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.