PT-2017-6326 · None+2 · Util-Linux+2

Published 2014-11-09 · Updated 2025-12-04 · CVE-2014-9114

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions util-linux versions prior to 2.26rc-1

Description The issue allows local users to execute arbitrary code.

Recommendations For versions prior to 2.26rc-1, update to version 2.26rc-1 or later to resolve the issue.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

ALT-PU-2014-2335

CVE-2014-9114

MGASA-2014-0517

OPENSUSE-SU-2024:10279-1

SUSE-SU-2015:0270-1

SUSE-SU-2015:0580-1

SUSE-SU-2015_0270-1

SUSE-SU-2015_0580-1

Affected Products

Alt Linux

Suse

Util-Linux

References · 46

• https://github.com/karelzak/util-linux/commit/89e90ae7b2826110ea28c1c0eb8e7c56c3907bdc · Patch
• http://openwall.com/lists/oss-security/2014/11/26/21 · Patch
• https://osv.dev/vulnerability/CVE-2014-9114 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0517.html · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0517 · Vendor Advisory
• https://lists.fedoraproject.org/pipermail/package-announce/2014-December/145188.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-December/146229.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:0270-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9114 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-9114 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1168485 · Patch
• https://security-tracker.debian.org/tracker/CVE-2014-9114 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10279-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201612-14 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2014-December/145188.html · Vendor Advisory