Util Linux

util-linux

Vendor: Linux • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-1677 1Linux 1Util Linux Apr 29, 2026 Apr 10, 2011 N/A· v4 N/A· v3 4.6 MEDIUM· v2 mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.
CVE-2011-1676 1Linux 1Util Linux Apr 29, 2026 Apr 10, 2011 N/A· v4 N/A· v3 3.3 LOW· v2 mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations.
CVE-2011-1675 1Linux 1Util Linux Apr 29, 2026 Apr 10, 2011 N/A· v4 N/A· v3 3.3 LOW· v2 mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a...Show more mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.Show less
CVE-2008-1926 1Linux 1Util Linux Apr 23, 2026 Apr 24, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending...Show more Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."Show less