pkg:Debian/util-linux

All known vulnerabilities

• CRITICAL9.8CVE-2015-5224The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly…
  from 0, < 2.27-1
• HIGH7.8CVE-2018-7738util-linux - security update
  from 0, < 2.31.1-0.5
• HIGH7.8CVE-2018-7738util-linux - security update
  from 0, < 2.29.2-1+deb9u1
• HIGH7.8CVE-2014-9114Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code.
  from 0, < 2.25.2-4
• HIGH7.8CVE-2016-2779runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the t…
  from 0, < 2.31.1-0.1
• MEDIUM6.7CVE-2020-21583An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parame…
  from 0, < 2.27-1
• MEDIUM6.1CVE-2025-14104A flaw was found in util-linux.
  from 0
• MEDIUM5.5CVE-2021-3996A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem.
  from 0, < 2.36.1-8+deb11u1
• MEDIUM5.5CVE-2021-3995util-linux - security update
  from 0, < 2.36.1-8+deb11u1
• MEDIUM5.5CVE-2021-3995util-linux - security update
  from 0, < 2.36.1-8+deb11u1
• MEDIUM5.5CVE-2022-0563A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support.
  from 0
• MEDIUM5.5CVE-2021-37600util-linux - security update
  from 0, < 2.36.1-8
• MEDIUM5.5CVE-2021-37600util-linux - security update
  from 0, < 2.33.1-0.1+deb10u1
• MEDIUM5.5CVE-2001-1494script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typesc…
  from 0, < 2.11n-1
• MEDIUM5.3CVE-2026-3184A flaw was found in util-linux.
  from 0
• MEDIUM4.7CVE-2026-27456util-linux is a random collection of Linux utilities.
  from 0
• MEDIUM4.7CVE-2017-2616shadow - security update
  from 0, < 2.29.2-1
• MEDIUM4.6CVE-2016-5011The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a…
  from 0, < 2.28.1-1
• LOW3.3CVE-2024-28085util-linux - security update
  from 0, < 2.36.1-8+deb11u2
• LOW3.3CVE-2024-28085util-linux - security update
  from 0, < 2.36.1-8+deb11u2
• —CVE-2015-5218Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a cr…
  from 0, < 2.27-1
• —CVE-2013-0157(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restrict…
  from 0, < 2.20.1-5.5
• —CVE-2011-1677mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspec…
  from 0, < 2.20.1-1
• —CVE-2011-1675mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would inte…
  from 0, < 2.20.1-1
• —CVE-2008-1926util-linux - log injection
  from 0, < 2.13.1-3+lenny1
• —CVE-2008-1926util-linux - log injection
  from 0, < 2.13.1.1-1
• —CVE-2007-5191loop-aes-utils - privilege escalation
  from 0, < 2.12r-19+lenny1
• —CVE-2007-5191loop-aes-utils - privilege escalation
  from 0, < 2.13-8
• —CVE-2007-5191loop-aes-utils - privilege escalation
  from 0, < 2.12r-19etch1
• —CVE-2006-7108login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has be…
  from 0, < 2.17.2-9
• —CVE-2005-2876loop-aes-utils - privilege escalation
  from 0, < 2.12p-8
• —CVE-2005-2876loop-aes-utils - privilege escalation
  from 0, < 2.11n-7woody1