Lucene search
K

1175 matches found

OSV
OSV
added 2021/07/30 2:15 p.m.6 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS5.9AI score
Exploits0References5
NVD
NVD
added 2021/07/30 2:15 p.m.17 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS0.00042EPSS
Exploits1References5
OSV
OSV
added 2021/07/30 2:15 p.m.1 views

DEBIAN-CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS5.6AI score0.00042EPSS
Exploits1References1
OSV
OSV
added 2021/07/30 2:15 p.m.1 views

ALPINE-CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS7.5AI score0.00042EPSS
Exploits1References1
Prion
Prion
added 2021/07/30 2:15 p.m.26 views

Integer overflow

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

1.2CVSS5.8AI score0.00042EPSS
Exploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/07/30 2:15 p.m.32 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS6.4AI score0.00042EPSS
Exploits1References1
OSV
OSV
added 2021/07/30 2:15 p.m.0 views

UBUNTU-CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS6.4AI score0.00042EPSS
Exploits1References2
Veracode
Veracode
added 2021/07/30 5:7 a.m.3 views

Denial Of Service (DoS)

util-linux:sid is vulnerable to denial of service. An attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file...

5.5CVSS6.4AI score0.00042EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2021/07/30 12:0 a.m.1 views

util-linux 输入验证错误漏洞

util-linux is an open source package. An input validation error vulnerability exists in util-linux version 2.37.1, which stems from an integer overflow in util-linux. An attacker can exploit this vulnerability to cause a buffer overflow by using system resources in a manner that results in a larg...

5.5CVSS8.7AI score0.00042EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2021/07/29 2:25 p.m.72 views

CVE-2021-37600

An integer truncation flaw was found in util-linux that potentially causes a buffer overflow if an attacker can use system resources that lead to a large number in the /proc/sysvipc/sem file. The highest threat from this vulnerability is to system availability...

5.5CVSS3.3AI score0.00042EPSS
Exploits1References3
CVE
CVE
added 2021/07/28 12:0 a.m.245 views

CVE-2021-37600

CVE-2021-37600 affects util-linux up to version 2.37.1, describing an integer overflow that could lead to a buffer overflow in IPC utilities if resource usage drives a large value in /proc/sysvipc/sem. Connected advisories (Debian LTS, Gentoo GLSA, Alpine) confirm the issue and recommend upgradin...

5.5CVSS5.8AI score0.00042EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2021/07/28 12:0 a.m.4 views

PT-2021-3737 · Unknown +2 · Util-Linux +2

Name of the Vulnerable Software and Affected Versions: util-linux versions through 2.37.1 Description: The issue is related to an integer overflow in the util-linux package, specifically in the ipcutils.c file. This overflow can potentially cause a buffer overflow if an attacker is able to...

10CVSS6.5AI score0.327EPSS
Exploits9References106
AlpineLinux
AlpineLinux
added 2021/07/28 12:0 a.m.52 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS6.2AI score0.00042EPSS
Exploits1
Debian CVE
Debian CVE
added 2021/07/28 12:0 a.m.46 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

5.5CVSS6.2AI score0.00042EPSS
Exploits1
Cvelist
Cvelist
added 2021/07/28 12:0 a.m.22 views

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

6.3AI score0.00042EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2021/07/07 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-2173)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0004EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/07/06 12:0 a.m.28 views

EulerOS Virtualization 3.0.2.2 : util-linux (EulerOS-SA-2021-2173)

According to the version of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characte...

7.8CVSS6.3AI score0.0004EPSS
Exploits0References2
Rosalinux
Rosalinux
added 2021/07/02 6:18 p.m.38 views

Advisory ROSA-SA-2021-1992

Software: util-linux 2.23.2 OS: Cobalt 7.9 CVE-ID: CVE-2015-5224 CVE-Crit: CRITICAL CVE-DESC: The mkostemp function in login-utils in util-linux, when misused, allows remote attackers to cause file name conflict and possibly other attacks. CVE-STATUS: default CVE-REV: default CVE-ID: CVE-2016-501...

9.8CVSS6.9AI score0.04076EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/07/02 12:0 a.m.32 views

EulerOS Virtualization for ARM 64 3.0.2.0 : util-linux (EulerOS-SA-2021-2070)

According to the version of the util-linux packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - It was found that runuser was vulnerable to TIOCSTI ioctl attacks, allowing the executed program to push characters t...

7.8CVSS6.3AI score0.0004EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/07/02 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-2070)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.0004EPSS
Exploits0References2
Rows per page
Query Builder