CVE-2007-0822

2007-02-0720:28:00

Debian Security Bug Tracker

security-tracker.debian.org

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

5.1%

JSON

umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL dereference and application crash by invoking the program with a pathname for a USB pen drive that was mounted and then physically removed, which might allow the users to obtain sensitive information, including core file contents.

OSVersionArchitecturePackageVersionFilename
Debian12allutil-linux< 2.38.1-5+deb12u1util-linux_2.38.1-5+deb12u1_all.deb
Debian11allutil-linux< 2.36.1-8+deb11u2util-linux_2.36.1-8+deb11u2_all.deb
Debian999allutil-linux< 2.40.1-9util-linux_2.40.1-9_all.deb
Debian13allutil-linux< 2.40.1-9util-linux_2.40.1-9_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	util-linux	< 2.38.1-5+deb12u1	util-linux_2.38.1-5+deb12u1_all.deb
Debian	11	all	util-linux	< 2.36.1-8+deb11u2	util-linux_2.36.1-8+deb11u2_all.deb
Debian	999	all	util-linux	< 2.40.1-9	util-linux_2.40.1-9_all.deb
Debian	13	all	util-linux	< 2.40.1-9	util-linux_2.40.1-9_all.deb