41 matches found
DEBIAN-CVE-2014-9114
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code...
CVE-2014-9114
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code...
Code injection
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code...
UBUNTU-CVE-2014-9114
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code...
CVE-2014-9114
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code...
CVE-2014-9114
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code...
CVE-2014-9114
CVE-2014-9114 affects util-linux Blkid; BlkId in util-linux before 2.26rc-1 allows local users to execute arbitrary code. Affected component is the blkid functionality in util-linux. The provided documents do not specify mitigations or patch versions beyond the vulnerable range; no explicit explo...
CVE-2014-9114
Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code...
util-linux: Arbitrary code execution
Background util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems. Description A command injection flaw was discovered in util-linux’s “blkid” utility. It uses caching files /dev/.blkid.tab or /run/blkid/blkid.tab to store info about the...
GLSA-201612-14 : util-linux: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-201612-14 util-linux: Arbitrary code execution A command injection flaw was discovered in util-linuxs blkid utility. It uses caching files /dev/.blkid.tab or /run/blkid/blkid.tab to store info about the UUID, LABEL etc. it finds o...
util-linux blkid commands injection
No description provided...
[ MDVSA-2015:122 ] util-linux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:122 http://www.mandriva.com/en/support/security/ Package : util-linux Date : March 29, 2015 Affected: Business Server 2.0 Problem Description: Updated util-linux packages fix security vulnerability: Sebastia...
util-linux: command injection
There is a command injection inside blkid. It uses caching files /dev/.blkid.tab or /run/blkid/blkid.tab to store info about the UUID, LABEL etc it finds on certain devices. However, it does not strip " character, so it can be confused to build variable names containing embedded shell metas, whic...
Updated util-linux packages fix CVE-2014-9114
Updated util-linux packages fix security vulnerability: Sebastian Krahmer reported a command injection flaw in blkid. This could possibly result in command execution with root privileges CVE-2014-9114. The util-linux package has been updated to version 2.24.2 and patched to fix this issue and oth...
SUSE-SU-2015:0580-1 Recommended update for util-linux
This update for util-linux provides the following fixes: Make blkid8 issue only one READ on faulty devices. bnc859062 Added option -r to fsck8 to dump a few resource statistics after each successful run. bnc761815 Prevent excessive clock drift calculations. bnc871698 Check /etc/adjtime drift...
util-linux-ng security, bug fix and enhancement update
2.17.2-12.9 - fix 892471 - CVE-2013-0157 mount folder existence information disclosure 2.17.2-12.8 - fix 679833 - RFE tailf should support - fix 719927 - RFE add adjtimex --compare functionality to hwclock - fix 730272 - losetup does not warn if backing file is 512 bytes - fix 730891 - document...
Scientific Linux Security Update : util-linux-ng on SL6.x i386/x86_64
The util-linux-ng packages contain a large variety of low-level system utilities that are necessary for a Linux operating system to function. Multiple flaws were found in the way the mount and umount commands performed mtab mounted file systems table file updates. A local, unprivileged user allow...
RedHat Update for util-linux-ng RHSA-2011:1691-03
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
util-linux-ng security, bug fix, and enhancement update
2.17.2-12.4 - fix CVE-2011-1675 - mount fails to anticipate RLIMITFSIZE - fix CVE-2011-1677 - umount may fail to remove /etc/mtab lock file 2.17.2-12.3 - fix fatal typos in patch for 723546 2.17.2-12.2 - rename /etc/hushlogin to /etc/hushlogins 696731 2.17.2-12.1 - fix 723546 - Defects revealed b...
Low: Red Hat Security Advisory: util-linux-ng security, bug fix, and enhancement update
Updated util-linux-ng packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base...