UT
Product
Util-linux
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 10Low 1
Watch
Add Util-linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-21583 | 6.7 | Aug 22 | An issue was discovered in hwclock.13-v2.27 allows attackers to gain escalated privlidges or execute arbitrary commands via the path parameter when setting the date Affected: before 2.27 |
| CVE-2021-3996 | 5.5 | Aug 23 | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem Affected: 2.34 before 2.37.3 |
| CVE-2021-3995 | 5.5 | Aug 23 | A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem Affected: 2.34 before 2.37.3 |
| CVE-2022-0563 | 5.5 | Feb 21 | A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support Affected: before 2.37.4 |
| CVE-2021-37600 | 5.5 | Jul 28 | An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in… Affected: through 2.37.1 |
| CVE-2001-1494 | 5.5 | Dec 31 | script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system,… Affected: before 2.11n |
| CVE-2026-13595 | 5.3 | Jun 29 | Util-linux: util-linux: heap use-after-free in libblkid nested partition probing Affected: before 2.42.2 |
| CVE-2026-3184 | 5.3 | Apr 3 | Util-linux: util-linux: access control bypass due to improper hostname canonicalization Affected: All versions, or not specified |
| CVE-2026-27456 | 4.7 | Apr 3 | util-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup Affected: before 2.41.4 |
| CVE-2016-5011 | 4.6 | Apr 11 | The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption)… Affected: through 2.28 |
Showing 10