CVE-2013-0157

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Affected Products (NVD)
VendorProductVersion
kernelutil-linux
2.14.1
kernelutil-linux
2.17.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
util-linux
bookworm
2.38.1-5+deb12u1
fixed
bookworm (security)
2.38.1-5+deb12u1
fixed
bullseye
2.36.1-8+deb11u2
fixed
bullseye (security)
2.36.1-8+deb11u2
fixed
sid
2.40.2-10
fixed
squeeze
no-dsa
trixie
2.40.2-9
fixed
wheezy
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
util-linux
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
eoan
not-affected
focal
not-affected
groovy
not-affected
hardy
ignored
hirsute
not-affected
impish
not-affected
jammy
not-affected
kinetic
not-affected
lucid
ignored
lunar
not-affected
mantic
not-affected
noble
not-affected
oneiric
ignored
precise
ignored
quantal
ignored
raring
ignored
saucy
ignored
trusty
needed
utopic
not-affected
vivid
not-affected
wily
not-affected
xenial
not-affected
yakkety
not-affected
zesty
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libblkid-devel
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libblkid-devel-static
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libblkid1
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libblkid1-32bit
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libfdisk-devel
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libfdisk1
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libmount-devel
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libmount1
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libmount1-32bit
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libsmartcols-devel
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libsmartcols1
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libuuid-devel
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libuuid-devel-static
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libuuid1
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
libuuid1-32bit
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
python-libmount
suse enterprise sap 12 SP5
2.33.2-2.9
fixed
suse enterprise server 12 SP5
2.33.2-2.9
fixed
util-linux
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
util-linux-lang
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.13
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.13
fixed
suse enterprise server 15
2.31.1-7.1
fixed
util-linux-systemd
suse enterprise desktop 15
2.31.1-7.1
fixed
suse enterprise sap 12 SP5
2.33.2-2.10
fixed
suse enterprise sap 15
2.31.1-7.1
fixed
suse enterprise server 12 SP5
2.33.2-2.10
fixed
suse enterprise server 15
2.31.1-7.1
fixed
uuidd
suse enterprise sap 12 SP5
2.33.2-2.10
fixed
suse enterprise server 12 SP5
2.33.2-2.10
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
libblkid
RHEL 6
0:2.17.2-12.9.el6
fixed
libblkid-devel
RHEL 6
0:2.17.2-12.9.el6
fixed
libuuid
RHEL 6
0:2.17.2-12.9.el6
fixed
libuuid-devel
RHEL 6
0:2.17.2-12.9.el6
fixed
util-linux-ng
RHEL 6
0:2.17.2-12.9.el6
fixed
uuidd
RHEL 6
0:2.17.2-12.9.el6
fixed
Common Weakness Enumeration
References
http://bugs.debian.org/697464
http://marc.info/?l=oss-security&m=135749410312247&w=2
http://osvdb.org/88953
http://rhn.redhat.com/errata/RHSA-2013-0517.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:154
https://bugzilla.redhat.com/show_bug.cgi?id=892330
http://bugs.debian.org/697464
http://marc.info/?l=oss-security&m=135749410312247&w=2
http://osvdb.org/88953
http://rhn.redhat.com/errata/RHSA-2013-0517.html
http://www.mandriva.com/security/advisories?name=MDVSA-2013:154
https://bugzilla.redhat.com/show_bug.cgi?id=892330