Kernel Util-Linux vulnerabilities

CVE-2011-1677 [MEDIUM] CVE-2011-1677: mount in util-linux 2 mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.

CVE-2011-1676 [LOW] CVE-2011-1676: mount in util-linux 2 mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations.

CVE-2011-1675 [LOW] CVE-2011-1675: mount in util-linux 2 mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

CVE-2015-5218 [LOW] CWE-119 CVE-2015-5218: Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cau Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service (crash) via a crafted file, related to the page global variable.

CVE-2013-0157 [LOW] CWE-200 CVE-2013-0157: (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.