{"id":"CVE-2013-0157","aliases":["DEBIAN-CVE-2013-0157","EUVD-2013-0198","GHSA-5f9c-xx25-xwrv","RHSA-2013:0517","UBUNTU-CVE-2013-0157","openSUSE-SU-2024:10279-1"],"status":"published","title":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local...","description":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.","severity":{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00375,"percentile":0.31719,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2014-01-21T18:00:00Z","modified":"2026-09-01T20:03:14Z","fixes":[{"ecosystem":"Debian:12","package":"util-linux","fixed_in":["2.20.1-5.5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"util-linux","fixed_in":["2.20.1-5.5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"util-linux","fixed_in":["2.20.1-5.5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libblkid-devel","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libuuid-devel","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"util-linux-ng","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"util-linux-ng-debuginfo","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libblkid","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"libuuid","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"uuidd","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libblkid-devel","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libuuid-devel","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"util-linux-ng","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"util-linux-ng-debuginfo","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libblkid","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libuuid","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"uuidd","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libblkid","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libblkid-devel","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libuuid","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"libuuid-devel","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"util-linux-ng","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"util-linux-ng-debuginfo","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"uuidd","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libblkid","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libblkid-devel","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libuuid","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libuuid-devel","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"util-linux-ng","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"util-linux-ng-debuginfo","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"uuidd","fixed_in":["0:2.17.2-12.9.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.1-5.5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.1-5.5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.1-5.5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libblkid-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libuuid-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"util-linux-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"util-linux-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libblkid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"libuuid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"uuidd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libblkid-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libuuid-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"util-linux-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"util-linux-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libblkid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"libuuid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"uuidd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libblkid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libblkid-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libuuid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"libuuid-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"util-linux-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"util-linux-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"uuidd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libblkid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libblkid-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libuuid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"libuuid-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"util-linux-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"util-linux-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"uuidd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.2-12.9.el6"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.20.1-5.1ubuntu9","2.20.1-5.1ubuntu10","2.20.1-5.1ubuntu11","2.20.1-5.1ubuntu12","2.20.1-5.1ubuntu13","2.20.1-5.1ubuntu14","2.20.1-5.1ubuntu15","2.20.1-5.1ubuntu16","2.20.1-5.1ubuntu17","2.20.1-5.1ubuntu18","2.20.1-5.1ubuntu19","2.20.1-5.1ubuntu20","2.20.1-5.1ubuntu20.1","2.20.1-5.1ubuntu20.2","2.20.1-5.1ubuntu20.3","2.20.1-5.1ubuntu20.4","2.20.1-5.1ubuntu20.6","2.20.1-5.1ubuntu20.7","2.20.1-5.1ubuntu20.9"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.2-2.1"}]}],"bundled":4}],"products":[{"vendor":"kernel","product":"util-linux"}],"references":[{"url":"http://bugs.debian.org/697464","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://osvdb.org/88953","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0517.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://marc.info/?l=oss-security\u0026m=135749410312247\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:154","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=892330","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0157","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5f9c-xx25-xwrv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2013-0157","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0517","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/util-linux-ng.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=679833","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=790728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=818621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839281","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0517.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0157","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2013-0157","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9114","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2779","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-0157","description":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.","status":"published","published":"2014-01-21T18:00:00Z","modified":"2024-08-06T14:18:09.475Z","updated_at":"2026-11-02T14:34:59.222149Z"}],"euvd":[{"id":"EUVD-2013-0198","description":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.","status":"published","published":"2014-01-21T18:00:00Z","modified":"2024-08-06T14:18:09Z","updated_at":"2026-11-03T01:56:46.251982Z"}],"ghsa":[{"id":"GHSA-5f9c-xx25-xwrv","title":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local...","description":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.","status":"published","published":"2022-05-05T02:48:30Z","modified":"2023-02-01T05:01:56Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:49:48.641892Z"}],"nvd":[{"id":"CVE-2013-0157","description":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.","status":"published","published":"2014-01-21T18:55:09.007Z","modified":"2026-06-16T23:48:52.187Z","cvss":[{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:48.062712Z"}],"osv":[{"id":"CVE-2013-0157","description":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.","status":"published","published":"2014-01-21T18:55:09Z","modified":"2026-04-10T03:42:37.199394Z","updated_at":"2026-11-02T15:43:58.802805Z"},{"id":"DEBIAN-CVE-2013-0157","description":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.","status":"published","published":"2014-01-21T18:55:09.007Z","modified":"2026-09-01T20:03:14.519774683Z","updated_at":"2026-11-02T15:45:25.218101Z"},{"id":"openSUSE-SU-2024:10279-1","title":"libblkid-devel-2.28.2-2.1 on GA media","description":"These are all security issues fixed in the libblkid-devel-2.28.2-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:55.328362Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2013:0517","title":"Red Hat Security Advisory: util-linux-ng security, bug fix and enhancement update","status":"published","published":"2024-09-15T20:20:37Z","modified":"2026-06-26T12:21:43.51397533Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"UBUNTU-CVE-2013-0157","description":"(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.","status":"published","published":"2014-01-21T18:55:00Z","modified":"2026-04-22T09:20:02.983754Z","updated_at":"2026-11-02T15:54:06.854805Z"}]}}