CVE-2018-7738

The CVE-2018-7738 entry concerns util-linux before 2.32-rc1, where the bash-completion/umount script mishandles certain mountpoint names, allowing a local attacker to escalate privileges via an autocompletion sequence in Bash. Exploitation is demonstrated by embedding shell commands in a mountpoi...

CVE-2016-2779

CVE-2016-2779 affects util-linux, where runuser -u program can be hijacked via crafted TIOCSTI ioctl to push input to the terminal buffer, enabling local privilege escalation by hijacking the tty. Root cause: TIOCSTI-based input injection. Impact: local privilege escalation. Exploitation status/...

CVE-2007-5191

The CVE-2007-5191 issue concerns util-linux: the mount and umount utilities call setuid/setgid in the wrong order and do not check return values, which could allow a local attacker to elevate privileges via helper programs (e.g., mount.nfs). Affected component: util-linux (mount/umount). Impact: ...

CVE-2014-9114

CVE-2014-9114 affects util-linux Blkid; BlkId in util-linux before 2.26rc-1 allows local users to execute arbitrary code. Affected component is the blkid functionality in util-linux. The provided documents do not specify mitigations or patch versions beyond the vulnerable range; no explicit explo...