CVE-2021-37600: Integer Overflow
First published: Wed Jul 28 2021(Updated: )
** DISPUTED ** An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kernel Util-linux | <=2.37.1 | |
| NetApp ONTAP Select Deploy administration utility |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c
- https://github.com/karelzak/util-linux/issues/1395
- https://security.netapp.com/advisory/ntap-20210902-0002/
- https://security.gentoo.org/glsa/202401-08
- https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-37600.
What is the severity of CVE-2021-37600?
The severity of CVE-2021-37600 is medium (5.5).
What is the affected software?
The affected software is util-linux through 2.37.1 and NetApp ONTAP Select Deploy administration utility.
What is the fix for CVE-2021-37600?
There is currently no known fix for CVE-2021-37600. Please follow the official references for any updates or patches.
What are the references for CVE-2021-37600?
The references for CVE-2021-37600 are: [GitHub commit](https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c), [GitHub issue](https://github.com/karelzak/util-linux/issues/1395), [NetApp security advisory](https://security.netapp.com/advisory/ntap-20210902-0002/).
- collector/nvd-index
- agent/type
- agent/author
- agent/first-publish-date
- agent/remedy
- agent/severity
- agent/status
- agent/softwarecombine
- agent/weakness
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/tags
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- status/disputed
- vendor/kernel
- canonical/kernel util-linux
- version/kernel util-linux/2.37.1
- vendor/netapp
- canonical/netapp ontap select deploy administration utility