REDHAT-BUG-1168485: Command Injection

Published Nov 27, 2014

Updated

Sebastian Krahmer reported a command injection flaw in blkid. This could possibly result in command execution with root privileges (for example, when running blkid on a malicious USB drive):

http://www.openwall.com/lists/oss-security/2014/11/26/13

Affected Software

1 affected component

Openwall blkid

Event History

Nov 27, 2014

Data Sourced

via Red Hat·06:04 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1168485?

The severity of REDHAT-BUG-1168485 is classified as critical due to the potential for command execution with root privileges.

How do I fix REDHAT-BUG-1168485?

To fix REDHAT-BUG-1168485, update the blkid package to the latest version that addresses this vulnerability.

What is the impact of REDHAT-BUG-1168485?

The impact of REDHAT-BUG-1168485 could allow an attacker to execute arbitrary commands as root when using blkid on maliciously crafted USB drives.

Who reported REDHAT-BUG-1168485?

REDHAT-BUG-1168485 was reported by Sebastian Krahmer.

Which software is affected by REDHAT-BUG-1168485?

The software affected by REDHAT-BUG-1168485 is the OpenWall blkid utility.