Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

SUSE 15-SP3: Security Update for Util-Linux Moderate Integer Overflow

suse
Calendar Grey October 20, 2021
Scroller Suse
Major patch launched for util-linux addresses critical integer overflow vulnerability, bolstering security and reliability for SUSE systems.
An update that solves one vulnerability and has one errata is now available

Summary

This update for util-linux fixes the following issues: - CVE-2021-37600: Fixed an integer overflow which could lead to a buffer overflow in get_sem_elements() in sys-utils/ipcutils.c. (bsc#1188921) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE MicroOS 5.1: zypper in -t patch SUSE-SUSE-MicroOS-5.1-2021-3474=1 - SUSE Linux Enterprise Module for Server Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2021-3474=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2021-3474=1 Package List: - SUSE MicroOS 5.1 (aarch64 s390x x86_64):

Topics%20covered

Topics Covered

security advisory moderate buffer overflow patch util-linux integer overflow SUSE

References

#1178236 #1188921

Cross- CVE-2021-37600

CVSS scores:

CVE-2021-37600 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2021-37600 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products:

SUSE MicroOS 5.1

SUSE Linux Enterprise Module for Server Applications 15-SP3

SUSE Linux Enterprise Module for Basesystem 15-SP3

https://www.suse.com/security/cve/CVE-2021-37600.html

https://bugzilla.suse.com/1178236

https://bugzilla.suse.com/1188921

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:3474-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate buffer overflow patch util-linux integer overflow SUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.