mount and umount in util-linux and loop-aes-utils call...
High severity
Unreviewed
Published
May 1, 2022
to the GitHub Advisory Database
•
Updated Jan 31, 2023
Description
Published by the National Vulnerability Database
Oct 4, 2007
Published to the GitHub Advisory Database
May 1, 2022
Last updated
Jan 31, 2023
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
References