Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-37600: ** DISPUTED ** An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libblkid | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libblkid-devel | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libfdisk | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libfdisk-devel | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libmount | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libmount-devel | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libsmartcols | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libsmartcols-devel | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libuuid | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | libuuid-devel | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | python-libmount | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | util-linux | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | util-linux-debuginfo | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | util-linux-user | 0:2.30.2-2.amzn2.0.11 |
| Amazon Linux · 2 | uuidd | 0:2.30.2-2.amzn2.0.11 |
Vulnerabilities 1
-
Unscored —
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to us…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-37600.html