Unscored severity · published Apr 10, 2011
CVE-2011-1676
mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the…
–
CVSS
0.5%
EPSS
No
On KEV
Description
mount in util-linux 2.19 and earlier does not remove the /etc/mtab.tmp file after a failed attempt to add a mount entry, which allows local users to trigger corruption of the /etc/mtab file via multiple invocations.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UT
Util-linux · Linux
through 2.19; 2.2; 2.5; 2.7; 2.8; 2.9; +11 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1676
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1676
openwall.com
http://openwall.com/lists/oss-security/2011/03/04/10
openwall.com
http://openwall.com/lists/oss-security/2011/03/04/11
openwall.com
http://openwall.com/lists/oss-security/2011/03/04/12
openwall.com
http://openwall.com/lists/oss-security/2011/03/04/9
openwall.com
http://openwall.com/lists/oss-security/2011/03/05/3
openwall.com
http://openwall.com/lists/oss-security/2011/03/05/7
More from Util-linux
–
CVE-2011-1675
mount in util-linux 2.19 and earlier attempts to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to…
–
CVE-2011-1677
mount in util-linux 2.19 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors
–
CVE-2008-1926
Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of…