PT-2015-2717 · None+1 · Util-Linux+1

Martin Prpič · Publicado 2015-11-05 · Atualizado 2024-06-15 · CVE-2015-5218

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.27

Description The issue is related to a buffer overflow in the text-utils/colcrt.c file in the colcrt component of the util-linux utility. This can be exploited by local users through a crafted file, potentially causing a denial of service (crash), and is related to the page global variable.

Recommendations For versions prior to 2.27, update to version 2.27 or later to resolve the issue. As a temporary workaround, consider restricting access to the colcrt component until a patch is available.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-12082

CVE-2015-5218

MGASA-2015-0434

OPENSUSE-SU-2024:10279-1

SUSE-RU-2016:1515-1

SUSE-SU-2017:2699-1

SUSE-SU-2021:14693-1

Produtos afetados

Suse

Util-Linux

Referências · 61

• 🔥 http://spinics.net/lists/util-linux-ng/msg11873.html · Exploit
• https://bugzilla.suse.com/903362 · Nota
• https://cve.org/CVERecord?id=CVE-2015-5218 · Nota de Segurança
• https://bugzilla.suse.com/947494 · Nota
• https://bugzilla.suse.com/963140 · Nota
• https://bugzilla.suse.com/953691 · Nota
• https://bugzilla.suse.com/924994 · Nota
• https://bugzilla.suse.com/940837 · Nota
• ❌ https://github.com/kerolasa/lelux-utiliteetit/commit/d883d64d96ab9bef510745d064a351145b9babec · Correção, Deleted
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00035.html · Aviso do Fabricante
• https://suse.com/support/update/announcement/2021/suse-su-202114693-1 · Nota
• https://bugzilla.suse.com/950778 · Nota
• https://suse.com/security/cve/CVE-2016-2779 · Nota
• https://bugzilla.suse.com/956540 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5218 · Nota de Segurança