mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return value…

Exploit prediction (EPSS)

0.44% probability of exploitation in the next 30 days, higher than 38% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-252 Unchecked Return Value

References

• ubuntu.com /usn/usn-533-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• issues.rpath.com /browse/RPL-1757 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/27145 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• bugs.gentoo.org /show_bug.cgi?id=195390 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/27122 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• frontal2.mandriva.com /en/security/advisories?name=MDKSA-2007:198 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• git.kernel.org /?p=utils/util-linux-ng/util-linux-ng.git%3Ba=commit%3Bh=ebbeb2c7ac1b00b6083905957837a271e · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/28349 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• debian.org /security/2008/dsa-1449 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• debian.org /security/2008/dsa-1450 · vendor-advisory, x_refsource_DEBIAN, x_transferred
• secunia.com /advisories/27104 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/27283 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/485936/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• secunia.com /advisories/27354 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• lists.vmware.com /pipermail/security-announce/2008/000002.html · mailing-list, x_refsource_MLIST, x_transferred
• secunia.com /advisories/28469 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• security.gentoo.org /glsa/glsa-200710-18.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• secunia.com /advisories/28348 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securitytracker.com /id?1018782 · vdb-entry, x_refsource_SECTRACK, x_transferred
• redhat.com /archives/fedora-package-announce/2007-October/msg00144.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• secunia.com /advisories/27687 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• bugzilla.redhat.com /show_bug.cgi?id=320041 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/28368 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/27399 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10101 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• securityfocus.com /bid/25973 · vdb-entry, x_refsource_BID, x_transferred
• secunia.com /advisories/27188 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• support.avaya.com /elmodocs2/security/ASA-2008-023.htm · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2007/3417 · vdb-entry, x_refsource_VUPEN, x_transferred
• redhat.com /support/errata/RHSA-2007-0969.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• lists.opensuse.org /opensuse-security-announce/2007-10/msg00008.html · vendor-advisory, x_refsource_SUSE, x_transferred
• vmware.com /security/advisories/VMSA-2008-0001.html · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2008/0064 · vdb-entry, x_refsource_VUPEN, x_transferred
• securityfocus.com /archive/1/486859/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

• CVE List: CVE-2007-5191
• NVD: CVE-2007-5191

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.