CVE-2018-7738

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
kernelutil-linux
𝑥
≤ 2.31
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bash-completion
bookworm
unimportant
bullseye
unimportant
jessie
not-affected
sid
unimportant
trixie
unimportant
wheezy
not-affected
util-linux
bookworm
2.38.1-5+deb12u1
fixed
bookworm (security)
2.38.1-5+deb12u1
fixed
bullseye
2.36.1-8+deb11u2
fixed
bullseye (security)
2.36.1-8+deb11u2
fixed
jessie
not-affected
sid
2.40.2-10
fixed
trixie
2.40.2-9
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bash-completion
artful
ignored
bionic
not-affected
cosmic
ignored
disco
ignored
eoan
ignored
focal
not-affected
trusty
not-affected
xenial
not-affected
util-linux
artful
ignored
bionic
Fixed 2.31.1-0.4ubuntu3.7
released
cosmic
not-affected
disco
not-affected
eoan
not-affected
focal
not-affected
trusty
not-affected
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
libblkid-devel
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libblkid-devel-static
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libblkid1
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libblkid1-32bit
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libfdisk-devel
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libfdisk1
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libmount-devel
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libmount1
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libmount1-32bit
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libsmartcols-devel
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libsmartcols1
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libuuid-devel
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libuuid-devel-static
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libuuid1
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
libuuid1-32bit
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
python-libmount
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 12 SP2
2.28-44.18.38
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
util-linux
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
util-linux-lang
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.28
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.28
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.18
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.28
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
util-linux-systemd
suse enterprise desktop 15
2.31.1-9.3.1
fixed
suse enterprise desktop 15 SP1
2.33.1-2.14
fixed
suse enterprise desktop 15 SP2
2.33.1-4.5.1
fixed
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15
2.31.1-9.3.1
fixed
suse enterprise sap 15 SP1
2.33.1-2.14
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.25
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15
2.31.1-9.3.1
fixed
suse enterprise server 15 SP1
2.33.1-2.14
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
uuidd
suse enterprise sap 12 SP3
2.29.2-3.12.1
fixed
suse enterprise sap 12 SP5
2.33.2-4.33.1
fixed
suse enterprise sap 15 SP1
2.33.2-150100.4.40.1
fixed
suse enterprise sap 15 SP2
2.33.2-150100.4.40.1
fixed
suse enterprise server 12 SP2
2.28-44.18.25
fixed
suse enterprise server 12 SP3
2.29.2-3.39.2
fixed
suse enterprise server 12 SP5
2.33.2-4.33.1
fixed
suse enterprise server 15 SP1
2.33.2-150100.4.40.1
fixed
suse enterprise server 15 SP2
2.33.2-150100.4.40.1
fixed
References
http://www.securityfocus.com/bid/103367
https://bugs.debian.org/892179
https://github.com/karelzak/util-linux/commit/75f03badd7ed9f1dd951863d75e756883d3acc55
https://github.com/karelzak/util-linux/issues/539
https://usn.ubuntu.com/4512-1/
https://www.debian.org/security/2018/dsa-4134
http://www.securityfocus.com/bid/103367
https://bugs.debian.org/892179
https://github.com/karelzak/util-linux/commit/75f03badd7ed9f1dd951863d75e756883d3acc55
https://github.com/karelzak/util-linux/issues/539
https://security.netapp.com/advisory/ntap-20241213-0002/
https://usn.ubuntu.com/4512-1/
https://www.debian.org/security/2018/dsa-4134