util-linux (SUSE:Linux Enterprise Server for SAP Applications 12 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 12 SP2 package util-linux, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2018-7738 — CVSS 7.8 (high): In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint…
• CVE-2017-2616 — CVSS 5.5 (medium): A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated…
• CVE-2016-5011 — CVSS 4.6 (medium): The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a…