Every CVESearch/Get API key

CVE-2013-0157

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local...

2.1 LowFix available

CVE-2013-0157 is a low vulnerability (CVSS 2.1) in Kernel Util-linux, published January 21, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in util-linux 2.20.1-5.5.

What does this mean?
Severity
2.1 LowCVSS 2.0, NVD
Exploit chance
0.38%EPSS, 31st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.20.1-5.5util-linux +32 more

Description

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

Exploit likelihood

0.38%Down 0.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
util-linux
Debian:12
before 2.20.1-5.5
2.20.1-5.5
util-linux
Debian:13
before 2.20.1-5.5
2.20.1-5.5
util-linux
Debian:14
before 2.20.1-5.5
2.20.1-5.5
libblkid-devel
Red Hat:enterprise_linux:6::client
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libuuid-devel
Red Hat:enterprise_linux:6::client
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux-ng
Red Hat:enterprise_linux:6::client
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux-ng-debuginfo
Red Hat:enterprise_linux:6::client
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libblkid
Red Hat:enterprise_linux:6::client
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libuuid
Red Hat:enterprise_linux:6::client
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
uuidd
Red Hat:enterprise_linux:6::client
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
Show 23 moreShow less
Affected packages
PackageAffectedFixed
libblkid-devel
Red Hat:enterprise_linux:6::computenode
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libuuid-devel
Red Hat:enterprise_linux:6::computenode
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux-ng
Red Hat:enterprise_linux:6::computenode
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux-ng-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libblkid
Red Hat:enterprise_linux:6::computenode
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libuuid
Red Hat:enterprise_linux:6::computenode
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
uuidd
Red Hat:enterprise_linux:6::computenode
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libblkid
Red Hat:enterprise_linux:6::server
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libblkid-devel
Red Hat:enterprise_linux:6::server
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libuuid
Red Hat:enterprise_linux:6::server
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libuuid-devel
Red Hat:enterprise_linux:6::server
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux-ng
Red Hat:enterprise_linux:6::server
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux-ng-debuginfo
Red Hat:enterprise_linux:6::server
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
uuidd
Red Hat:enterprise_linux:6::server
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libblkid
Red Hat:enterprise_linux:6::workstation
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libblkid-devel
Red Hat:enterprise_linux:6::workstation
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libuuid
Red Hat:enterprise_linux:6::workstation
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
libuuid-devel
Red Hat:enterprise_linux:6::workstation
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux-ng
Red Hat:enterprise_linux:6::workstation
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux-ng-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
uuidd
Red Hat:enterprise_linux:6::workstation
before 0:2.17.2-12.9.el6
0:2.17.2-12.9.el6
util-linux
Ubuntu:14.04:LTS
All versions, plus listed versions
2.20.1-5.1ubuntu92.20.1-5.1ubuntu102.20.1-5.1ubuntu112.20.1-5.1ubuntu122.20.1-5.1ubuntu13
Show 14 moreShow less
2.20.1-5.1ubuntu142.20.1-5.1ubuntu152.20.1-5.1ubuntu162.20.1-5.1ubuntu172.20.1-5.1ubuntu182.20.1-5.1ubuntu192.20.1-5.1ubuntu202.20.1-5.1ubuntu20.12.20.1-5.1ubuntu20.22.20.1-5.1ubuntu20.32.20.1-5.1ubuntu20.42.20.1-5.1ubuntu20.62.20.1-5.1ubuntu20.72.20.1-5.1ubuntu20.9
None known
util-linux
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
before 2.28.2-2.1
2.28.2-2.1

What each source reports

NVD Score used2.1

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

Record
CVE-2013-0157
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE ListNo score

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

Record
CVE-2013-0157
Updated
2026-11-02
EUVDEUVD-2013-0198No score

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

Record
EUVD-2013-0198
Updated
2026-11-03
GitHub AdvisoriesGHSA-5f9c-xx25-xwrvNo score

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local...

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

Record
GHSA-5f9c-xx25-xwrv
Weakness
CWE-200
Updated
2026-11-02
OSVNo score

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

Record
CVE-2013-0157
Updated
2026-11-02
OSVDEBIAN-CVE-2013-0157No score

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

Record
DEBIAN-CVE-2013-0157
Updated
2026-11-02
OSVopenSUSE-SU-2024:10279-1No score

libblkid-devel-2.28.2-2.1 on GA media

These are all security issues fixed in the libblkid-devel-2.28.2-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10279-1
Updated
2026-11-02
OSVUBUNTU-CVE-2013-0157No score

(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.

Record
UBUNTU-CVE-2013-0157
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 19 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open