Moderate Photon OS Security Update - PHSA-2021-4.0-0081

Updates of 'util-linux' packages of Photon OS have been released...

OESA-2021-1308 util-linux security update

The util-linux package contains a random collection of files that implements some low-level basic linux utilities. Security Fixes: An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a lar...

Critical Photon OS Security Update - PHSA-2021-0283

Updates of 'util-linux' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0424

An update of 'util-linux' packages of Photon OS has been released...

Moderate Photon OS Security Update - PHSA-2021-3.0-0283

Updates of 'util-linux' packages of Photon OS have been released...

CVE-2021-37600 affecting package util-linux 2.32.1-7

CVE-2021-37600 affecting package util-linux 2.32.1-7. A patched version of the package is available...

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments and possibly in all realistic environments.

...

The vulnerability of the command-line utility tools in the util-linux package allows a attacker to execute arbitrary code on the target system.

The vulnerability of the command-line utility tools in util-linux involves a numerical overflow in ipcutils.c. Exploiting this vulnerability allows an attacker to send special data to the application and trigger a numerical overflow...

DEBIAN-CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

ALPINE-CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

Integer overflow

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

UBUNTU-CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

CVE-2021-37600

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic...

Denial Of Service (DoS)

util-linux:sid is vulnerable to denial of service. An attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file...

util-linux 输入验证错误漏洞

util-linux is an open source package. An input validation error vulnerability exists in util-linux version 2.37.1, which stems from an integer overflow in util-linux. An attacker can exploit this vulnerability to cause a buffer overflow by using system resources in a manner that results in a larg...

CVE-2021-37600

An integer truncation flaw was found in util-linux that potentially causes a buffer overflow if an attacker can use system resources that lead to a large number in the /proc/sysvipc/sem file. The highest threat from this vulnerability is to system availability...

CVE-2021-37600

CVE-2021-37600 affects util-linux up to version 2.37.1, describing an integer overflow that could lead to a buffer overflow in IPC utilities if resource usage drives a large value in /proc/sysvipc/sem. Connected advisories (Debian LTS, Gentoo GLSA, Alpine) confirm the issue and recommend upgradin...