CVE-2016-5011 The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS pa...
MediumCVSS 4.6
EPSS 0.46%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/util-linux(Debian:12) | < 2.28.1-1 | 2.28.1-1 |
| debian/util-linux(Debian:13) | < 2.28.1-1 | 2.28.1-1 |
| debian/util-linux(Debian:14) | < 2.28.1-1 | 2.28.1-1 |
| kernel util-linux | <= 2.28 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux eus | = 7.3 | No fix listed |
| redhat enterprise linux eus | = 7.4 | No fix listed |
| redhat enterprise linux eus | = 7.5 | No fix listed |
| redhat enterprise linux eus | = 7.6 | No fix listed |
| redhat enterprise linux eus | = 7.7 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.3 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server aus | = 7.7 | No fix listed |
| redhat enterprise linux server tus | = 7.3 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.7 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| ibm powerkvm | = 2.1 | No fix listed |
| ibm powerkvm | = 3.1 | No fix listed |
| ibm power hardware management console | = 8.8.6.0 | No fix listed |
References
- Debian Security Tracker CVE-2016-5011 vendor-advisory
- RHSA-2016:2605 third-party-advisory vendor-advisory
- www-01.ibm.com third-party-advisory
- www-01.ibm.com third-party-advisory
- [oss-security] 20160711 CVE-2016-5011: util-linux: Extended partition loop in MBR partition table leads to DoS mailing-list patch third-party-advisory
- 91683 third-party-advisory vdb-entry
- 1036272 third-party-advisory vdb-entry
- git.kernel.org patch vendor-advisory
- bugs.debian.org issue-tracking