PT-2017-15451 · Util Linux+5 · Util-Linux+5

Tobias Stoeckmann · Publicado 2017-02-22 · Atualizado 2024-06-15 · CVE-2017-2616

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.32.1

Description A race condition was found in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.

Recommendations For versions prior to 2.32.1, update to version 2.32.1 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

CWE-267

Identificadores relacionados

ALT-PU-2019-1609

CESA-2017_0654

CESA-2017_0907

CVE-2017-2616

DLA-838-1

DSA-3793-1

DSA-3793-2

MGASA-2017-0072

OPENSUSE-SU-2017_0589-1

OPENSUSE-SU-2017_0590-1

OPENSUSE-SU-2024:11282-1

RHSA-2017:0654

RHSA-2017:0907

RHSA-2017_0654

RHSA-2017_0907

SUSE-SU-2017:0553-1

SUSE-SU-2017:0554-1

SUSE-SU-2017:0555-1

SUSE-SU-2017:2699-1

SUSE-SU-2017:2700-1

SUSE-SU-2017_0554-1

SUSE-SU-2017_0555-1

SUSE-SU-2018:0866-1

SUSE-SU-2018_0866-1

USN-3276-1

USN-3276-2

USN-3276-3

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Util-Linux

Referências · 55

• https://github.com/karelzak/util-linux/commit/dffab154d29a288aa171ff50263ecc8f2e14a891 · Correção
• https://suse.com/security/cve/CVE-2016-5011 · Nota
• http://openwall.com/lists/oss-security/2017/02/23/2 · Nota
• https://suse.com/support/update/announcement/2017/suse-su-20170555-1 · Nota
• https://ubuntu.com/security/CVE-2016-6252 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2017/suse-su-20170554-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:0553-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:0866-1 · Aviso do Fabricante
• https://bugzilla.suse.com/966891 · Nota
• https://osv.dev/vulnerability/MGASA-2017-0072 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=20337 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-2616 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-2616 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2017/suse-su-20170553-1 · Nota
• https://cve.org/CVERecord?id=CVE-2017-2616 · Nota de Segurança