Medium · published July 30, 2021
An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.
| Product | Versions | Fixed in |
|---|---|---|
| kernel/util-linux | ≤ 2.37.1 | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |