Multiple vulnerabilities have been discovered in util-linux which can lead to denial of service or information disclosure.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/util-linux | * | < 2.37.4 | >= 2.37.4 |
util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.
Multiple vulnerabilities have been discovered in util-linux. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All util-linux users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.37.4"
A vulnerability was discovered in util-linux, which could potentially lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/util-linux | * | < 2.30.2-r1 | >= 2.30.2-r1 |
util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.
It was discovered that the umount bash-completion as provided by util-linux does not escap mount point paths.
An attacker controlling a volume label could entice a user with privileges to mount/umount filesystems to use umount command with auto completion, possibly resulting in execution of arbitrary code with root privileges.
Disable Bash-completion or remove “/usr/share/bash-completion/completions/umount”.
All util-linux users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.30.2-r1"
A vulnerability was discovered in util-linux, which could potentially lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/util-linux | * | < 2.26 | >= 2.26 |
util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.
A command injection flaw was discovered in util-linux’s “blkid” utility. It uses caching files (/dev/.blkid.tab or /run/blkid/blkid.tab) to store info about the UUID, LABEL etc. it finds on certain devices. However, it does not strip ‘”’ character, so it can be confused to build variable names containing shell metacharacters, which it would usually encode inside the value.
A local attacker could create a specially crafted partition label containing arbitrary code which would get executed when the “blkid” utility processes that value.
There is no known workaround at this time.
All util-linux users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.26"
Multiple vulnerabilities have been found in util-linux, the worst of which may lead to Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/util-linux | * | < 2.22.2 | >= 2.22.2 |
util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.
Multiple vulnerabilities have been discovered in util-linux. Please review the CVE identifiers referenced below for details.
A local attacker may be able to cause a Denial of Service condition, trigger corruption of /etc/mtab, obtain sensitive information, or have other unspecified impact.
There is no known workaround at this time.
All util-linux users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.22.2"
The mount and umount programs might allow local attackers to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/util-linux | * | < 2.12r-r8 | >= 2.12r-r8 |
util-linux is a suite of Linux programs including mount and umount, programs used to mount and unmount filesystems.
Ludwig Nussel discovered that the check_special_mountprog() and check_special_umountprog() functions call setuid() and setgid() in the wrong order and do not check the return values, which can lead to privileges being dropped improperly.
A local attacker may be able to exploit this vulnerability by using mount helpers such as the mount.nfs program to gain root privileges and run arbitrary commands.
There is no known workaround at this time.
All util-linux users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.12r-r8"
A command validation error in umount can lead to an escalation of privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/util-linux | * | < 2.12q-r3 | >= 2.12q-r3 |
util-linux is a suite of useful Linux programs including umount, a program used to unmount filesystems.
When a regular user mounts a filesystem, they are subject to restrictions in the /etc/fstab configuration file. David Watson discovered that when unmounting a filesystem with the '-r' option, the read-only bit is set, while other bits, such as nosuid or nodev, are not set, even if they were previously.
An unprivileged user facing nosuid or nodev restrictions can umount -r a filesystem clearing those bits, allowing applications to be executed suid, or have device nodes interpreted. In the case where the user can freely modify the contents of the filesystem, privilege escalation may occur as a custom program may execute with suid permissions.
Two workarounds exist, first, the suid bit can be removed from the umount utility, or users can be restricted from mounting and unmounting filesystems in /etc/fstab.
All util-linux users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.12q-r3"
The login program included in util-linux could leak sensitive information under certain conditions.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-apps/util-linux | * | <= 2.11 | >= 2.12 |
Util-linux is a suite of essential system utilites, including login, agetty, fdisk.
In some situations the login program could leak sensitive data due to an incorrect usage of a reallocated pointer.
NOTE: Only users who have PAM support disabled on their systems (i.e. -PAM in their USE variable) will be affected by this vulnerability. By default, this USE flag is enabled on all architectures. Users with PAM support on their system receive login binaries as part of the pam-login package, which remains unaffected.
A remote attacker may obtain sensitive data.
A workaround is not currently known for this issue. All users are advised to upgrade to the latest version of the affected package.
All util-linux users should upgrade to version 2.12 or later:
# emerge sync # emerge -pv ">=sys-apps/util-linux-2.12" # emerge ">=sys-apps/util-linux-2.12"