CVE-2007-5191
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the...
CVE-2007-5191 is a high vulnerability (CVSS 7.2) in Debian Linux, published October 4, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in util-linux 2.13-8.
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
Exploit likelihood
What each source reports
NVD Score used
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- Record
CVE-2007-5191- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-252
- Updated
- 2026-11-02
CVE List No score
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- Record
CVE-2007-5191- Updated
- 2026-11-02
EUVDEUVD-2007-5172 No score
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- Record
EUVD-2007-5172- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x6mx-7fcg-2j6w No score
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the...
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- Record
GHSA-x6mx-7fcg-2j6w- Weakness
- CWE-252
- Updated
- 2026-11-02
OSVBELL-CVE-2007-5191
CVE-2007-5191 does not affect BellSoft software
- Record
BELL-CVE-2007-5191- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
OSV No score
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- Record
CVE-2007-5191- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5191 No score
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
- Record
DEBIAN-CVE-2007-5191- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
util-linuxDebian:12 |
before 2.13-8 | 2.13-8 |
util-linuxDebian:13 |
before 2.13-8 | 2.13-8 |
util-linuxDebian:14 |
before 2.13-8 | 2.13-8 |
loop-aes-utilsDebian:4.0 |
before 2.12r-15+etch1, plus listed versions 2.12r-15 |
2.12r-15+etch1 |
loop-aes-utilsDebian:3.1 |
before 2.12p-4sarge2, plus listed versions 2.12p-42.12p-4sarge1 |
2.12p-4sarge2 |
util-linuxDebian:4.0 |
before 2.12r-19etch1, plus listed versions 2.12r-19 |
2.12r-19etch1 |
util-linuxDebian:3.1 |
before 2.12p-4sarge2, plus listed versions 2.12p-42.12p-4sarge1 |
2.12p-4sarge2 |
util-linuxDebian:5.0 |
before 2.12r-19+lenny1 | 2.12r-19+lenny1 |
loop-aes-utilsDebian:5.0 |
before 2.12r-16+lenny1 | 2.12r-16+lenny1 |
losetupRed Hat:enterprise_linux:3::as |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mountRed Hat:enterprise_linux:3::as |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linuxRed Hat:enterprise_linux:3::as |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linux-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
losetupRed Hat:enterprise_linux:3::desktop |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
mountRed Hat:enterprise_linux:3::desktop |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linuxRed Hat:enterprise_linux:3::desktop |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linux-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
losetupRed Hat:enterprise_linux:3::es |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
mountRed Hat:enterprise_linux:3::es |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linuxRed Hat:enterprise_linux:3::es |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linux-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
losetupRed Hat:enterprise_linux:3::ws |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
mountRed Hat:enterprise_linux:3::ws |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linuxRed Hat:enterprise_linux:3::ws |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linux-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.11y-31.24 | 0:2.11y-31.24 |
util-linuxRed Hat:enterprise_linux:4::as |
before 0:2.12a-17.el4_6.1 | 0:2.12a-17.el4_6.1 |
util-linux-debuginfoRed Hat:enterprise_linux:4::as |
before 0:2.12a-17.el4_6.1 | 0:2.12a-17.el4_6.1 |
util-linuxRed Hat:enterprise_linux:4::desktop |
before 0:2.12a-17.el4_6.1 | 0:2.12a-17.el4_6.1 |
util-linux-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:2.12a-17.el4_6.1 | 0:2.12a-17.el4_6.1 |
util-linuxRed Hat:enterprise_linux:4::es |
before 0:2.12a-17.el4_6.1 | 0:2.12a-17.el4_6.1 |
util-linux-debuginfoRed Hat:enterprise_linux:4::es |
before 0:2.12a-17.el4_6.1 | 0:2.12a-17.el4_6.1 |
util-linuxRed Hat:enterprise_linux:4::ws |
before 0:2.12a-17.el4_6.1 | 0:2.12a-17.el4_6.1 |
util-linux-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:2.12a-17.el4_6.1 | 0:2.12a-17.el4_6.1 |
util-linuxRed Hat:enterprise_linux:5::client |
before 0:2.13-0.45.el5_1.1 | 0:2.13-0.45.el5_1.1 |
util-linux-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.13-0.45.el5_1.1 | 0:2.13-0.45.el5_1.1 |
util-linuxRed Hat:enterprise_linux:5::server |
before 0:2.13-0.45.el5_1.1 | 0:2.13-0.45.el5_1.1 |
util-linux-debuginfoRed Hat:enterprise_linux:5::server |
before 0:2.13-0.45.el5_1.1 | 0:2.13-0.45.el5_1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | affected, aliases, facts, references, title | GitHub Advisories, OSV |
| 2026-11-02 | created | CVE List, NVD |
References
ubuntu.com/usn/usn-533-1
issues.rpath.com/browse/RPL-1757
secunia.com/advisories/27145
bugs.gentoo.org/show_bug.cgi?id=195390
frontal2.mandriva.com/en/security/advisories?name=MDKSA-2007:198
Show 38 moreShow less
git.kernel.org?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b6083905957837a271e80b187e
debian.org/security/2008/dsa-1449
securityfocus.com/archive/1/485936/100/0/threaded
lists.vmware.com/pipermail/security-announce/2008/000002.html
security.gentoo.org/glsa/glsa-200710-18.xml
securitytracker.com/id?1018782
redhat.com/archives/fedora-package-announce/2007-October/msg00144.html
bugzilla.redhat.com/show_bug.cgi?id=320041
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10101
support.avaya.com/elmodocs2/security/ASA-2008-023.htm
vupen.com/english/advisories/2007/3417
lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html
vmware.com/security/advisories/VMSA-2008-0001.html
nvd.nist.gov/vuln/detail/CVE-2007-5191
github.com/advisories/GHSA-x6mx-7fcg-2j6w
docs.bell-sw.com/security/cves/CVE-2007-5191
security-tracker.debian.org/tracker/CVE-2007-5191
access.redhat.com/errata/RHSA-2007:0969
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0969.json
cve.org/CVERecord?id=CVE-2007-5191