Integer overflow in Util-linux - CVE-2021-37600

Vulnerability identifier: #VU55451

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-37600

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in ipcutils.c. A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Util-linux
SUSE MicroOS
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
HPE Helion Openstack
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Server Applications
openEuler
RecoverPoint for Virtual Machines
SmartFabric OS10
EMC ECS
util-linux-systemd-debuginfo
util-linux-lang
uuidd-debuginfo
uuidd
util-linux-systemd-debugsource
libblkid1
libblkid1-32bit
libblkid1-debuginfo
libblkid1-debuginfo-32bit
libfdisk1
libfdisk1-debuginfo
libmount1
libmount1-32bit
libmount1-debuginfo
libmount1-debuginfo-32bit
libsmartcols1
libsmartcols1-debuginfo
libuuid1
libuuid1-32bit
libuuid1-debuginfo
libuuid1-debuginfo-32bit
python-libmount
python-libmount-debuginfo
python-libmount-debugsource
util-linux
util-linux-debuginfo
util-linux-debugsource
util-linux-systemd
libblkid-devel-static
libblkid1-32bit-debuginfo
libuuid-devel
libblkid-devel
libuuid1-32bit-debuginfo
libmount1-32bit-debuginfo
libfdisk-devel
libmount-devel
libsmartcols-devel
libuuid-devel-static
libmount
util-linux-user
util-linux-devel
libuuid
libsmartcols
libfdisk
libblkid
util-linux-help
Juniper Cloud Native Router
Junos cRPD

Install update from vendor's website.

RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
SmartFabric OS10 - update to 10.5.4.11
util-linux-systemd-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
util-linux-lang - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
uuidd-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
uuidd - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
util-linux-systemd-debugsource - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libblkid1 - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libblkid1-32bit - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libblkid1-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libblkid1-debuginfo-32bit - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.33.2-4.11.1
libfdisk1 - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libfdisk1-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libmount1 - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libmount1-32bit - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libmount1-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libmount1-debuginfo-32bit - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.33.2-4.11.1
libsmartcols1 - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libsmartcols1-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libuuid1 - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libuuid1-32bit - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libuuid1-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libuuid1-debuginfo-32bit - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.33.2-4.11.1
python-libmount - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.33.2-4.11.1
python-libmount-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.33.2-4.11.1
python-libmount-debugsource - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.33.2-4.11.1
util-linux - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
util-linux-debuginfo - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
util-linux-debugsource - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
util-linux-systemd - addressed in versions 2.28-44.35.1, 2.29.2-3.24.1, 2.29.2-9.17.1, 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libblkid-devel-static - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.16.1, 2.36.2-4.5.1
libblkid1-32bit-debuginfo - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.16.1, 2.36.2-4.5.1
libuuid-devel - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libblkid-devel - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libuuid1-32bit-debuginfo - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.16.1, 2.36.2-4.5.1
libmount1-32bit-debuginfo - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.16.1, 2.36.2-4.5.1
libfdisk-devel - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.16.1, 2.36.2-4.5.1
libmount-devel - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libsmartcols-devel - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.11.1, 2.33.2-4.16.1, 2.36.2-4.5.1
libuuid-devel-static - addressed in versions 2.31.1-150000.9.18.2, 2.33.2-4.16.1, 2.36.2-4.5.1
util-linux - update to 2.35.2-8
util-linux-debugsource - update to 2.35.2-8
libmount - update to 2.35.2-8
util-linux-user - update to 2.35.2-8
util-linux-devel - update to 2.35.2-8
libuuid - update to 2.35.2-8
util-linux-debuginfo - update to 2.35.2-8
libsmartcols - update to 2.35.2-8
python-libmount - update to 2.35.2-8
libfdisk - update to 2.35.2-8
libblkid - update to 2.35.2-8
uuidd - update to 2.35.2-8
util-linux-help - update to 2.35.2-8
EMC ECS - update to 3.7.0.2
Juniper Cloud Native Router - update to 23.4R1
Junos cRPD - update to 23.4R1

• https://github.com/karelzak/util-linux/issues/1395

• Integer overflow in util-linux
• SUSE update for util-linux
• SUSE update for util-linux
• SUSE update for util-linux
• SUSE update for util-linux
• Multiple vulnerabilities in Dell Elastic Cloud Storage (ECS)
• SUSE update for util-linux
• SUSE update for util-linux
• SUSE update for util-linux
• openEuler update for util-linux
• Multiple vulnerabilities in Juniper Cloud Native Router
• Multiple vulnerabilities in Juniper Networks Junos cRPD
• Multiple vulnerabilities in Dell SmartFabric OS10
• Dell RecoverPoint for Virtual Machines update for third-party components