PT-2017-6832

Name of the Vulnerable Software and Affected Versions util-linux affected versions not specified Description The issue is related to the mkostemp function in login-utils, which can be exploited by remote attackers to cause file name collision and potentially other attacks when used incorrectly...

Qualys Security Advisory - CVE-2015-3245 userhelper - CVE-2015-3246 libuser

Hello, it is July 23, 2015, 17:00 UTC, the Coordinated Release Date for CVE-2015-3245 and CVE-2015-3246. Please find our advisory below, and our exploit attached. Qualys Security Advisory CVE-2015-3245 userhelper chfn newline filtering CVE-2015-3246 libuser passwd file handling -- Summary...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the util-linux-2.11y package on the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the util-linux-2.12a package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

util-linux Package 'hwclock(8)' local elevation of privilege vulnerability

The util-linux package is a suite of system administration tools for Linux that provides tools to load, unload, format, partition and manage hard drives, open tty ports and get kernel messages. The util-linux package is vulnerable to a local boost vulnerability. A local attacker could exploit thi...

hwclock Privilege Escalation

Hello, During a recent assessment I have stumbled across a system which had hwclock8 setuid root hwclock is a part of util-linux, all versions affected $ man hwclock | sed -n '223,231p' Users access and setuid Sometimes, you need to install hwclock setuid root. If you want users other than the...

SUSE SLED12 / SLES12 Security Update : util-linux (SUSE-SU-2015:0270-1)

util-linux was updated to fix one security issue. This security issue was fixed : - CVE-2014-9114: Using crafted block devices e.g. USB sticks it was possibly to inject code via libblkid. libblkid was fixed to care about unsafe chars and possible buffer overflow in cache bnc907434 The update...

Debian GNU/Linux Local Compromise Data Compromise

The multiple vulnerabilities in the util-linux package of the Debian GNU/Linux operating system can be exploited, which may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...

Gentoo Linux Data Compromise

The vulnerability of the util-linux package up to version 2.12r-r8 of the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Gentoo Linux Data Compromise

The multiple vulnerabilities in the util-linux package up to version 2.22.2 of the Gentoo Linux operating system can lead to violations of privacy, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Red Hat Enterprise Linux Data Compromise

The vulnerability of the util-linux-2.13 package on the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Red Hat Linux Data Compromise

The vulnerability of the util-linux-2.10f package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Red Hat Linux Data Compromise

The vulnerability of the util-linux-2.10m package on the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

Red Hat Linux Data Compromise

The vulnerability of the util-linux-2.10s package on the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Red Hat Linux Data Compromise

The multiple vulnerabilities in the util-linux-2.11f package of the Red Hat Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

[ MDVSA-2015:122 ] util-linux

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:122 http://www.mandriva.com/en/support/security/ Package : util-linux Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated util-linux packages fix security vulnerability: Sebastia...

util-linux blkid commands injection

No description provided...

Mandriva Linux Security Advisory : util-linux (MDVSA-2015:122)

Updated util-linux packages fix security vulnerability : Sebastian Krahmer reported a command injection flaw in blkid. This could possibly result in command execution with root privileges CVE-2014-9114. The util-linux package has been updated to version 2.24.2 and patched to fix this issue and...

util-linux: command injection

There is a command injection inside blkid. It uses caching files /dev/.blkid.tab or /run/blkid/blkid.tab to store info about the UUID, LABEL etc it finds on certain devices. However, it does not strip " character, so it can be confused to build variable names containing embedded shell metas, whic...

SuSE 11.3 Security Update : util-linux (SAT Patch Number 10452)

util-linux has been updated to fix one security issue : - command injection flaw in blkid bnc907434. Additionally, these non-security issues have been fixed :. CVE-2014-9114 - Fix possible script hang. bnc888678 - Enable build of libmount / findmnt. bnc900965 - Don't stop trying filesystem when...