[UPDATE] util-linux: Multiple Vulnerabilities
A BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) ·
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
The advisory adds that exploitation requires local access and that no CVE IDs or evidence of active exploitation are provided.
Description
Multiple vulnerabilities exist in util-linux that can be exploited by a local attacker. Exploitation can lead to obtaining administrator rights, bypassing security measures, manipulating data, or causing a denial-of-service condition. Affected are Linux systems with vulnerable util-linux versions; the BSI advisory is listed as an update and does not provide CVE IDs. The advisory does not state active exploitation or the existence of an exploit. The vulnerabilities require local access to the affected system.
Risk score
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 0.00
- industry weight
- 1.10
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- -10.00
Path: operational