CVE-2011-1675

Опубликовано: 10 апр. 2011

Источник: nvd

CVSS2: 3.3

EPSS Низкий

Описание

mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Ссылки

http://openwall.com/lists/oss-security/2011/03/04/10
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/04/11
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/04/12
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/04/9
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/05/3
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/05/7
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/07/9
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/14/16
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/14/5
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/14/7
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/15/6
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/22/4
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/22/6
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/31/3
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/03/31/4
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/01/2
Mailing List
Third Party Advisory
http://secunia.com/advisories/48114
http://www.redhat.com/support/errata/RHSA-2011-1691.html
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=688980
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/66705

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:linux:util-linux:*:*:*:*:*:*:*:*

Версия до 2.19 (включая)

cpe:2.3:a:linux:util-linux:2.2:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.5:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.7:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.8:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.9:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.10:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.11:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.12:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.12:pre:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.13:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.13:pre:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.14:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.15:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.16:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.17:*:*:*:*:*:*:*

cpe:2.3:a:linux:util-linux:2.18:*:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00028

Низкий

3.3 Low

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2011-1675

ubuntu

больше 14 лет назад

CVE-2011-1675

redhat

больше 14 лет назад

CVE-2011-1675

debian

больше 14 лет назад

mount in util-linux 2.19 and earlier attempts to append to the /etc/mt ...

GHSA-rjp4-x6wp-r79j

github

больше 3 лет назад

ELSA-2012-0307

oracle-oval

больше 13 лет назад

ELSA-2012-0307: util-linux security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 6%

0.00028

Низкий

3.3 Low

CVSS2

Дефекты

CWE-399