Every CVE Search/ Get API key

CVE-2015-5224

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers...

9.8 CriticalFix available

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

4.53%Up 3.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Record
CVE-2015-5224
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-377
Updated
2026-11-02
CVE List 9.8

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Record
CVE-2015-5224
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-377
Updated
2026-11-02
EUVDEUVD-2015-5220 9.8

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Record
EUVD-2015-5220
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-g2jw-fqx3-5mwq 9.8

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers...

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Record
GHSA-g2jw-fqx3-5mwq
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-377
Updated
2026-11-02
OSV 9.8

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Record
CVE-2015-5224
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2015-5224 9.8

The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.

Record
DEBIAN-CVE-2015-5224
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2015-0352 No score

Updated util-linux packages fix CVE-2015-5224

Updated util-linux packages fix security vulnerability:

The chfn and chsh commands in util-linux's login-utils are vulnerable to a file name collision due to incorrect mkstemp usage. If the chfn and chsh binaries are both setuid-root they eventually call mkostemp in such a way that an attacker could repeatedly call them and eventually be able to overwrite certain files in /etc (CVE-2015-5224).

Record
MGASA-2015-0352
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
util-linux
Debian:12
 before 2.27-1
2.27-1
util-linux
Debian:13
 before 2.27-1
2.27-1
util-linux
Debian:14
 before 2.27-1
2.27-1
util-linux
Mageia:5
 before 2.25.2-3.1.mga5
2.25.2-3.1.mga5

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5224 is a critical vulnerability (CVSS 9.8) in Kernel Util-linux, published September 8, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.53%, the 91st percentile. Fixed in util-linux 2.27-1.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open