55 lines
2.1 KiB
XML
55 lines
2.1 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
||
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
|
||
<glsa id="201612-14">
|
||
<title>util-linux: Arbitrary code execution</title>
|
||
<synopsis>A vulnerability was discovered in util-linux, which could
|
||
potentially lead to the execution of arbitrary code.
|
||
</synopsis>
|
||
<product type="ebuild">util-linux</product>
|
||
<announced>2016-12-06</announced>
|
||
<revised count="1">2016-12-06</revised>
|
||
<bug>530844</bug>
|
||
<access>local</access>
|
||
<affected>
|
||
<package name="sys-apps/util-linux" auto="yes" arch="*">
|
||
<unaffected range="ge">2.26</unaffected>
|
||
<vulnerable range="lt">2.26</vulnerable>
|
||
</package>
|
||
</affected>
|
||
<background>
|
||
<p>util-linux is a suite of Linux programs including mount and umount,
|
||
programs used to mount and unmount filesystems.
|
||
</p>
|
||
</background>
|
||
<description>
|
||
<p>A command injection flaw was discovered in util-linux’s “blkid”
|
||
utility. It uses caching files (/dev/.blkid.tab or /run/blkid/blkid.tab)
|
||
to store info about the UUID, LABEL etc. it finds on certain devices.
|
||
However, it does not strip ‘”’ character, so it can be confused to
|
||
build variable names containing shell metacharacters, which it would
|
||
usually encode inside the value.
|
||
</p>
|
||
</description>
|
||
<impact type="normal">
|
||
<p>A local attacker could create a specially crafted partition label
|
||
containing arbitrary code which would get executed when the “blkid”
|
||
utility processes that value.
|
||
</p>
|
||
</impact>
|
||
<workaround>
|
||
<p>There is no known workaround at this time.</p>
|
||
</workaround>
|
||
<resolution>
|
||
<p>All util-linux users should upgrade to the latest version:</p>
|
||
|
||
<code>
|
||
# emerge --sync
|
||
# emerge --ask --oneshot --verbose ">=sys-apps/util-linux-2.26"
|
||
</code>
|
||
</resolution>
|
||
<references>
|
||
<uri link="https://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9114">CVE-2014-9114</uri>
|
||
</references>
|
||
<metadata tag="requester" timestamp="2016-11-22T22:56:21Z">whissi</metadata>
|
||
<metadata tag="submitter" timestamp="2016-12-06T03:44:24Z">whissi</metadata>
|
||
</glsa>
|