Red Hat Security AdvisoryRHSA-2012:0307
util-linux security, bug fix, and enhancement update
Released 2012-02-21 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) util-linux-2.13-0.59.el5, util-linux-2.13-0.59.el5.i386, util-linux-2.13-0.59.el5.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) util-linux-2.13-0.59.el5, util-linux-2.13-0.59.el5.i386
Fixes 2 records
Priority LOW 22
mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00449 · Published 2011-04-10 · Partial fix
Priority LOW 16
mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a…
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00404 · Published 2011-04-10 · Partial fix CWE-399
