SB2022030431 - SUSE update for libeconf, shadow and util-linux 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022030431

SB2022030431 - SUSE update for libeconf, shadow and util-linux

Published: March 4, 2022

Security Bulletin ID SB2022030431
Severity
Low
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2021-3995)

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to improper parsing of the /proc/self/mountinfo file in libmount. A local user can unmount other user's filesystems that are either world-writable themselves or mounted in a world-writable directory.


2) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2021-3996)

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to improper UID check in libmount. A local user can unmount FUSE filesystems of users with similar UID.


Remediation

Install update from vendor's website.

References