{"id":"CVE-2021-37600","aliases":["ALPINE-CVE-2021-37600","BELL-CVE-2021-37600","DEBIAN-CVE-2021-37600","DLA-3782-1","EUVD-2021-24158","GHSA-3jhw-vwp2-45mp","JLSEC-2025-190","MGASA-2022-0076","OESA-2021-1308","SUSE-SU-2021:3463-1","SUSE-SU-2021:3474-1","SUSE-SU-2021:3475-1","SUSE-SU-2021:3523-1","SUSE-SU-2022:1103-1","SUSE-SU-2022:1105-1","SUSE-SU-2022:1108-1","UBUNTU-CVE-2021-37600","openSUSE-SU-2021:1440-1","openSUSE-SU-2021:3474-1"],"status":"disputed","title":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an...","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00661,"percentile":0.51949,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2021-07-28T00:00:00Z","modified":"2026-10-23T17:17:56Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"util-linux","fixed_in":["2.37.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"util-linux","fixed_in":["2.36.1-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"util-linux","fixed_in":["2.36.1-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"util-linux","fixed_in":["2.36.1-8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"util-linux","fixed_in":["2.35.2-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"util-linux","fixed_in":["2.35.2-8.oe1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-libmount","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"util-linux","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"util-linux-systemd","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"python-libmount","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"util-linux","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"util-linux-systemd","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-libmount","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"util-linux","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"util-linux-systemd","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"python-libmount","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"util-linux","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"util-linux-systemd","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"python-libmount","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"util-linux","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"util-linux-systemd","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"python-libmount","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"util-linux","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"util-linux-systemd","fixed_in":["2.29.2-3.24.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"util-linux","fixed_in":["2.36.2-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"util-linux-systemd","fixed_in":["2.36.2-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"util-linux-systemd","fixed_in":["2.36.2-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"util-linux","fixed_in":["2.36.2-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"util-linux-systemd","fixed_in":["2.36.2-4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"util-linux","fixed_in":["2.33.2-4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libmount","fixed_in":["2.33.2-4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"util-linux","fixed_in":["2.33.2-4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"util-linux-systemd","fixed_in":["2.33.2-4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libmount","fixed_in":["2.33.2-4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"util-linux","fixed_in":["2.33.2-4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"util-linux-systemd","fixed_in":["2.33.2-4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"util-linux","fixed_in":["2.33.2-4.11.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"util-linux","fixed_in":["2.33.2-4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"util-linux-systemd","fixed_in":["2.33.2-4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"util-linux-systemd","fixed_in":["2.33.2-4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"util-linux","fixed_in":["2.33.2-4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"util-linux-systemd","fixed_in":["2.33.2-4.16.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"python-libmount","fixed_in":["2.28-44.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"util-linux","fixed_in":["2.28-44.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"util-linux-systemd","fixed_in":["2.28-44.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"python-libmount","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"util-linux","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"util-linux-systemd","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-libmount","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"util-linux","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"util-linux-systemd","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python-libmount","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"util-linux","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"util-linux-systemd","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python-libmount","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"util-linux","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"util-linux-systemd","fixed_in":["2.29.2-9.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"util-linux","fixed_in":["2.31.1-150000.9.18.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"util-linux-systemd","fixed_in":["2.31.1-150000.9.18.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"util-linux","fixed_in":["2.31.1-150000.9.18.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"util-linux-systemd","fixed_in":["2.31.1-150000.9.18.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"util-linux","fixed_in":["2.31.1-150000.9.18.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"util-linux-systemd","fixed_in":["2.31.1-150000.9.18.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"util-linux","fixed_in":["2.31.1-150000.9.18.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"util-linux-systemd","fixed_in":["2.31.1-150000.9.18.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"util-linux","fixed_in":["2.37.2-4ubuntu2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"python3-libmount","fixed_in":["2.33.2-lp152.5.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"util-linux","fixed_in":["2.33.2-lp152.5.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"util-linux-systemd","fixed_in":["2.33.2-lp152.5.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"python3-libmount","fixed_in":["2.36.2-4.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"util-linux","fixed_in":["2.36.2-4.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"util-linux-systemd","fixed_in":["2.36.2-4.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.1-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.1-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.1-8"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.1-0.1+deb10u1"}]}],"versions":["2.33.1-0.1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35.2-8.oe1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-3.24.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.11.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP2","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-4.16.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-44.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-44.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28-44.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"python-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.2-9.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-150000.9.18.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-150000.9.18.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-150000.9.18.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-150000.9.18.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-150000.9.18.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-150000.9.18.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-150000.9.18.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31.1-150000.9.18.2"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.2-4ubuntu2"}]}],"versions":["2.36.1-8ubuntu1","2.37.2-4ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"python3-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-lp152.5.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-lp152.5.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33.2-lp152.5.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"python3-libmount","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-4.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"util-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-4.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"util-linux-systemd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.36.2-4.5.1"}]}]}],"products":[{"vendor":"kernel","product":"util-linux"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/karelzak/util-linux/issues/1395","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210902-0002/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/202401-08","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html","tags":["mailing-list","x_transferred","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-37600","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210902-0002"},{"url":"https://github.com/advisories/GHSA-3jhw-vwp2-45mp"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-37600","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-37600","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-37600","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0076.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29565","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2021-October/009610.html","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/24/2","tags":["web"]},{"url":"https://www.debian.org/security/2022/dsa-5055","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SW73IARDAP7WWQ6ETYQB2OS2SLW4XTT3/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5279-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2YUFRTN7YYS4ESW372SWK2PURGSGVDL4/","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2022/02/17/2","tags":["web"]},{"url":"https://cdn.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36.2-ReleaseNotes","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1308","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213463-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1081947","tags":["report"]},{"url":"https://bugzilla.suse.com/1082293","tags":["report"]},{"url":"https://bugzilla.suse.com/1084671","tags":["report"]},{"url":"https://bugzilla.suse.com/1085196","tags":["report"]},{"url":"https://bugzilla.suse.com/1106214","tags":["report"]},{"url":"https://bugzilla.suse.com/1122417","tags":["report"]},{"url":"https://bugzilla.suse.com/1125886","tags":["report"]},{"url":"https://bugzilla.suse.com/1135534","tags":["report"]},{"url":"https://bugzilla.suse.com/1135708","tags":["report"]},{"url":"https://bugzilla.suse.com/1151708","tags":["report"]},{"url":"https://bugzilla.suse.com/1168235","tags":["report"]},{"url":"https://bugzilla.suse.com/1168389","tags":["report"]},{"url":"https://bugzilla.suse.com/1169006","tags":["report"]},{"url":"https://bugzilla.suse.com/1174942","tags":["report"]},{"url":"https://bugzilla.suse.com/1175514","tags":["report"]},{"url":"https://bugzilla.suse.com/1175623","tags":["report"]},{"url":"https://bugzilla.suse.com/1178236","tags":["report"]},{"url":"https://bugzilla.suse.com/1178554","tags":["report"]},{"url":"https://bugzilla.suse.com/1178825","tags":["report"]},{"url":"https://bugzilla.suse.com/1188921","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-37600","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213474-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213475-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20213523-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221103-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1038841","tags":["report"]},{"url":"https://bugzilla.suse.com/1116347","tags":["report"]},{"url":"https://bugzilla.suse.com/1172427","tags":["report"]},{"url":"https://bugzilla.suse.com/1194642","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221105-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221108-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-37600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-37600","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O37YZAXFT5P25MP6HADS7PSL7LUNUR45/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KLPFQQ775XYJFXYC4GI3EPDN5KR7OLG7/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-37600","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","status":"disputed","published":"2021-07-28T00:00:00Z","modified":"2026-10-14T11:49:11.871Z","updated_at":"2026-11-02T14:32:58.359368Z"}],"euvd":[{"id":"EUVD-2021-24158","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","status":"published","published":"2021-07-28T00:00:00Z","modified":"2026-10-14T11:49:11Z","updated_at":"2026-11-02T17:27:16.356399Z"}],"ghsa":[{"id":"GHSA-3jhw-vwp2-45mp","title":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an...","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file.","status":"published","published":"2022-05-24T19:09:19Z","modified":"2026-10-14T12:31:21Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:13:24.188405Z"}],"nvd":[{"id":"CVE-2021-37600","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","status":"disputed","published":"2021-07-30T14:15:18.737Z","modified":"2026-10-14T12:17:15.117Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":1.2,"vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:06:56.185362Z"}],"osv":[{"id":"ALPINE-CVE-2021-37600","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","status":"published","published":"2021-07-30T14:15:18.737Z","modified":"2026-10-23T17:17:56.203930058Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:48.646074Z"},{"id":"BELL-CVE-2021-37600","title":"CVE-2021-37600 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:00.177511Z","modified":"2026-01-26T09:49:46.776558Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-37600","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","status":"published","published":"2021-07-30T14:15:18.737Z","modified":"2026-10-20T14:28:07.160486706Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:20.434873Z"},{"id":"DEBIAN-CVE-2021-37600","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","status":"published","published":"2021-07-30T14:15:18.737Z","modified":"2026-10-15T09:47:40.509005759Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"JLSEC-2025-190","title":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an...","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the `/proc/sysvipc/sem` file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","status":"withdrawn","published":"2025-10-27T18:23:36.019Z","modified":"2026-07-23T22:30:09.395522482Z","cvss":[{"version":"2.0","score":1.2,"vector":"AV:L/AC:H/Au:N/C:N/I:N/A:P","level":"low"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"OESA-2021-1308","title":"util-linux security update","description":"The util-linux package contains a random collection of files that implements some low-level basic linux utilities.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file.(CVE-2021-37600)","status":"published","published":"2021-08-14T11:04:32Z","modified":"2026-08-18T01:15:56.518621959Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-37600","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","status":"published","published":"2021-07-30T14:15:00Z","modified":"2026-04-22T12:58:18.400641Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"DLA-3782-1","title":"util-linux - security update","status":"published","published":"2024-04-07T00:00:00Z","modified":"2026-03-09T01:20:42.573872Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2022-0076","title":"Updated util-linux packages fix security vulnerability","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a\nbuffer overflow if an attacker were able to use system resources in a way\nthat leads to a large number in the /proc/sysvipc/sem file. NOTE: this is\nunexploitable in GNU C Library environments, and possibly in all realistic\nenvironments. (CVE-2021-37600)\n\nUnauthorized unmount of FUSE filesystems belonging to users with similar\nuid. (CVE-2021-3995)\n\nUnauthorized unmount of filesystems in libmount (CVE-2021-3996)\n\nA flaw was found in the util-linux chfn and chsh utilities when compiled\nwith Readline support. The Readline library uses an \"INPUTRC\" environment\nvariable to get a path to the library config file. When the library cannot\nparse the specified file, it prints an error message containing data from\nthe file. This flaw allows an unprivileged user to read root-owned files,\npotentially leading to privilege escalation. This flaw affects util-linux\nversions prior to 2.37.4. (CVE-2022-0563)\n\nAdditional bug fixes included by updating to version 2.36.2. See release\nnotes for details.\n","status":"published","published":"2022-02-22T20:15:16Z","modified":"2026-04-16T04:43:33.004580968Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2021:1440-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\nUpdate to version 2.33.2 to provide seamless update from SLE12 SP5 to SLE15 SP2:\n\n- CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in get_sem_elements() in sys-utils/ipcutils.c (bsc#1188921).\n- agetty: Fix 8-bit processing in get_logname() (bsc#1125886).\n- mount: Fix 'mount' output for net file systems (bsc#1122417).\n- ipcs: Avoid overflows (bsc#1178236)\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2021-11-02T13:07:04Z","modified":"2025-05-07T18:13:06.151504Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"openSUSE-SU-2021:3474-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\n- CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in get_sem_elements() in sys-utils/ipcutils.c. (bsc#1188921)\n","status":"published","published":"2021-10-20T06:41:40Z","modified":"2026-02-04T04:35:49.946416Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:3463-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\n- CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in get_sem_elements. (bsc#1188921)\n- Prevent outdated pam files (bsc#1082293, bsc#1081947#c68).\n- Do not trim read-only volumes (bsc#1106214).\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- raw.service: Add RemainAfterExit=yes (bsc#1135534).\n- agetty: Reload issue only if it is really needed (bsc#1085196)\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- blockdev: Do not fail --report on kpartx-style partitions on multipath. (bsc#1168235)\n- nologin: Add support for -c to prevent error from su -c. (bsc#1151708)\n- Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389)\n- libblkid: Do not trigger CDROM autoclose. (bsc#1084671)\n- Avoid sulogin failing on not existing or not functional console devices. (bsc#1175514)\n- Build with libudev support to support non-root users. (bsc#1169006)\n- lscpu: avoid segfault on PowerPC systems with valid hardware configurations. (bsc#1175623, bsc#1178554, bsc#1178825)\n- Fix for warning on mounts to CIFS with mount. (SG#57988, bsc#1174942)\n","status":"published","published":"2021-10-19T07:27:40Z","modified":"2026-02-04T04:06:24.910556Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3474-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\n- CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in get_sem_elements() in sys-utils/ipcutils.c. (bsc#1188921)\n","status":"published","published":"2021-10-20T06:41:43Z","modified":"2026-02-04T02:44:53.386365Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3475-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\n- CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in get_sem_elements() in sys-utils/ipcutils.c. (bsc#1188921)\n","status":"published","published":"2021-10-20T06:41:56Z","modified":"2026-02-04T04:02:22.171709Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2021:3523-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\nUpdate to version 2.33.2 to provide seamless update from SLE12 SP5 to SLE15 SP2:\n\n- CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in get_sem_elements() in sys-utils/ipcutils.c (bsc#1188921).\n- agetty: Fix 8-bit processing in get_logname() (bsc#1125886).\n- mount: Fix 'mount' output for net file systems (bsc#1122417).\n- ipcs: Avoid overflows (bsc#1178236)\n","status":"published","published":"2021-10-26T13:40:28Z","modified":"2026-02-04T03:38:49.627008Z","updated_at":"2026-11-02T15:53:49.605187Z"},{"id":"SUSE-SU-2022:1103-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\n- Improve throughput and reduce clock sequence increments for high load situation with time based \n  version 1 uuids. (bsc#1194642)\n- Prevent root owning of `/var/lib/libuuid/clock.txt`. (bsc#1194642)\n- Warn if uuidd lock state is not usable. (bsc#1194642)\n- Fix 'su -s' bash completion. (bsc#1172427)\n- CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in get_sem_elements. (bsc#1188921)\n- Load /etc/default/su (bsc#1116347).\n- Prevent outdated pam files (bsc#1082293, bsc#1081947#c68).\n- Do not trim read-only volumes (bsc#1106214).\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- agetty: Reload issue only if it is really needed (bsc#1085196)\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- blockdev: Do not fail --report on kpartx-style partitions on multipath. (bsc#1168235)\n- nologin: Add support for -c to prevent error from su -c. (bsc#1151708)\n- Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389)\n- libblkid: Do not trigger CDROM autoclose. (bsc#1084671)\n- Avoid sulogin failing on not existing or not functional console devices. (bsc#1175514)\n- Build with libudev support to support non-root users. (bsc#1169006)\n- lscpu: avoid segfault on PowerPC systems with valid hardware configurations. (bsc#1175623, bsc#1178554, bsc#1178825)\n- Fix for warning on mounts to CIFS with mount. (bsc#1174942)\n","status":"published","published":"2022-04-04T15:48:00Z","modified":"2026-02-04T04:39:06.471185Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1105-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\n- Improve throughput and reduce clock sequence increments for high load situation with time based \n  version 1 uuids. (bsc#1194642)\n- Prevent root owning of `/var/lib/libuuid/clock.txt`. (bsc#1194642)\n- Warn if uuidd lock state is not usable. (bsc#1194642)\n- Fix 'su -s' bash completion. (bsc#1172427)\n- CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in get_sem_elements. (bsc#1188921)\n- Prevent outdated pam files (bsc#1082293, bsc#1081947#c68).\n- Do not trim read-only volumes (bsc#1106214).\n- libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417).\n- raw.service: Add `RemainAfterExit=yes` (bsc#1135534).\n- agetty: Reload issue only if it is really needed (bsc#1085196)\n- agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886)\n- blockdev: Do not fail `--report` on kpartx-style partitions on multipath. (bsc#1168235)\n- nologin: Add support for `-c` to prevent error from `su -c`. (bsc#1151708)\n- Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389)\n- libblkid: Do not trigger CDROM autoclose. (bsc#1084671)\n- Avoid sulogin failing on not existing or not functional console devices. (bsc#1175514)\n- Build with libudev support to support non-root users. (bsc#1169006)\n- lscpu: avoid segfault on PowerPC systems with valid hardware configurations. (bsc#1175623, bsc#1178554, bsc#1178825)\n- Fix warning on mounts to CIFS with mount –a. (bsc#1174942)\n\n","status":"published","published":"2022-04-04T15:48:58Z","modified":"2025-05-02T04:31:42.667593Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1108-1","title":"Security update for util-linux","description":"This update for util-linux fixes the following issues:\n\n- Improve throughput and reduce clock sequence increments for high load situation with time based \n  version 1 uuids. (bsc#1194642)\n- Prevent root owning of `/var/lib/libuuid/clock.txt`. (bsc#1194642)\n- Warn if uuidd lock state is not usable. (bsc#1194642)\n- Fix 'su -s' bash completion. (bsc#1172427)\n- CVE-2021-37600: Fixed an integer overflow which could lead to buffer overflow in get_sem_elements. (bsc#1188921)\n- blockdev: Do not fail --report on kpartx-style partitions on multipath. (bsc#1168235)\n- nologin: Add support for -c to prevent error from su -c. (bsc#1151708)\n- Avoid triggering autofs in lookup_umount_fs_by_statfs. (bsc#1168389)\n- Avoid segfault on PowerPC systems with valid hardware configurations. (bsc#1175623, bsc#1178554, bsc#1178825)\n- Do not trigger CDROM autoclose. (bsc#1084671)\n- Avoid sulogin failing on not existing or not functional console devices. (bsc#1175514)\n- Build with libudev support to support non-root users. (bsc#1169006)\n- Fix warning on mounts to CIFS with mount -a. (SG#57988, bsc#1174942)\n","status":"published","published":"2022-04-04T15:49:58Z","modified":"2026-02-04T03:24:39.646079Z","updated_at":"2026-11-02T15:53:50.513981Z"}]}}