CVE-2011-1675

CWE-3998 documents7 sources
Severity
3.3LOW
EPSS
0.0%
top 88.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Linux Util-linux
Timeline
PublishedApr 10
Latest updateMay 14

Description

mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

CVSS vector

AV:L/AC:M/C:P/I:P/A:NExploitability: 3.4 | Impact: 4.9

Affected Packages2 packages

▶Debianutil-linux< 2.20.1-1+3
▶NVDlinux/util-linux2.19+14

🔴Vulnerability Details

3
GHSA
GHSA-rjp4-x6wp-r79j: mount in util-linux 2↗2022-05-14
▶
CVEList
CVE-2011-1675: mount in util-linux 2↗2011-04-10
▶
OSV
CVE-2011-1675: mount in util-linux 2↗2011-04-10
▶

📋Vendor Advisories

2
Red Hat
util-linux: mount fails to anticipate RLIMIT_FSIZE↗2011-03-03
▶
Debian
CVE-2011-1675: util-linux - mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp fil...↗2011
▶

💬Community

2
Bugzilla
CVE-2011-1675 util-linux: mount fails to anticipate RLIMIT_FSIZE↗2011-04-12
▶
Bugzilla
CVE-2011-1675 CVE-2011-1677 util-linux-ng various flaws [fedora-all]↗2011-04-12
▶