Heap-based Buffer Overflow The advisory has been revoked - it doesn't affect any version of package uuidd (opens in a new tab)

Threat Intelligence

0.59% (45^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL6-UUIDD-1339520
published26 Jul 2021
disclosed11 Feb 2015

Report a new vulnerability Found a mistake?

Introduced: 11 Feb 2015

CVE-2015-1572 (opens in a new tab) CWE-122 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:6.

NVD Description

Note: Versions mentioned in the description apply only to the upstream uuidd package and not the uuidd package as distributed by RHEL.

Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block group descriptor to be marked as dirty. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-0247.