Lucene search
+L

3458 matches found

OSV
OSV
•added 2022/02/21 12:00 a.m.•36 views

CVE-2022-0563

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...

5.5CVSS6.8AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2022/02/21 12:00 a.m.•4 views

CVE-2022-0563

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...

6.2AI score0.00427EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/21 12:00 a.m.•3 views

CVE-2022-0563: Generation of Error Message Containing Sensitive Information

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from t...

5.5CVSS6.1AI score0.00427EPSS
SaveExploits0References3
CVE
CVE
•added 2022/02/21 12:00 a.m.•226 views

CVE-2022-0563

CVE-2022-0563 affects util-linux chfn/chsh utilities when built with Readline. The Readline library may expose data from the INPUTRC file to unprivileged users, enabling reading of root-owned files and potential privilege escalation. Affected versions are prior to 2.37.4. Remediation noted in mul...

5.5CVSS6.2AI score0.00427EPSS
SaveExploits0References3Affected Software1
Mageia
Mageia
•added 2022/02/18 12:14 a.m.•31 views

Updated nas packages fix security vulnerability

Stack-based buffer overflow in auphone.c that can be triggered by an environment variable. Also, the x11-util-cf-files package has been patched to allow building nas...

3.9AI score
SaveExploits0References4
OSV
OSV
•added 2022/02/18 12:14 a.m.•7 views

MGASA-2022-0066 Updated nas packages fix security vulnerability

Stack-based buffer overflow in auphone.c that can be triggered by an environment variable. Also, the x11-util-cf-files package has been patched to allow building nas...

7.6AI score
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/02/18 12:00 a.m.•11 views

Mageia: Security Advisory (MGASA-2022-0066)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References6
Veracode
Veracode
•added 2022/02/16 11:14 p.m.•31 views

Denial Of Service (DoS)

util-linux is vulnerable to denial of service...

5.5CVSS6.5AI score0.00427EPSS
SaveExploits0References9Affected Software1
Fedora
Fedora
•added 2022/02/16 1:28 a.m.•39 views

[SECURITY] Fedora 35 Update: util-linux-2.37.4-1.fc35

The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function. Among others, Util-linux contains the fdisk configuration tool and the login program...

5.5CVSS6.4AI score0.00427EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/02/16 12:00 a.m.•36 views

Slackware Linux 15.0 / current util-linux Vulnerability (SSA:2022-046-02)

The version of util-linux installed on the remote host is prior to 2.37.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-046-02 advisory. - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

5.5CVSS6.2AI score0.00427EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/02/16 12:00 a.m.•49 views

util-linux has unspecified vulnerabilities

util-linux is an open source package. util-linux suffers from a security vulnerability that stems from the partial disclosure of arbitrary files in CHFN and CHSH when Util-linux is compiled with libreadline. No detailed vulnerability details are available...

5.5CVSS6.5AI score0.00427EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2022/02/16 12:00 a.m.•17 views

Fedora: Security Advisory for util-linux (FEDORA-2022-b7de97d0a9)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.5AI score0.00427EPSS
SaveExploits0References2
Slackware Linux
Slackware Linux
•added 2022/02/15 8:05 p.m.•55 views

[slackware-security] util-linux

New util-linux packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/util-linux-2.37.4-i586-1slack15.0.txz: Upgraded. This release fixes a security issue in chsh1 and chfn8: By default, these...

5.5CVSS6.5AI score0.00427EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2022/02/14 7:43 p.m.•52 views

CVE-2022-0563

A flaw was found in the Linux kernel’s util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message...

5.5CVSS6.2AI score0.00427EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/02/14 12:00 a.m.•6 views

util-linux 安全漏洞

util-linux is an open source package. util-linux suffers from a security vulnerability that stems from the partial disclosure of arbitrary files in CHFN and CHSH when Util-linux is compiled with libreadline. No detailed vulnerability details are available...

5.5CVSS6.5AI score0.00427EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/02/13 12:00 a.m.•17 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-1102)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/02/13 12:00 a.m.•18 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-1152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.00661EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/02/13 12:00 a.m.•26 views

EulerOS Virtualization 3.0.6.0 : util-linux (EulerOS-SA-2022-1102)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to...

5.5CVSS6.5AI score0.00661EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2022/02/12 12:00 a.m.•18 views

EulerOS Virtualization 3.0.6.6 : util-linux (EulerOS-SA-2022-1152)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to...

5.5CVSS6.5AI score0.00661EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/02/10 12:00 a.m.•31 views

Ubuntu: Security Advisory (USN-5279-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.6AI score0.00634EPSS
SaveExploits4References2
Rows per page
Query Builder