CVE-2013-0157
Last modified
CVE-2013-0157 is a vulnerability of currently unknown severity. (a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
(a) mount and (b) umount in util-linux 2.14.1, 2.17.2, and probably other versions allow local users to determine the existence of restricted directories by (1) using the --guess-fstype command-line option or (2) attempting to mount a non-existent device, which generates different error messages depending on whether the directory exists.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kernel | Util-Linux | 2.14.1 |
| Kernel | Util-Linux | 2.17.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-0157?
How severe is CVE-2013-0157?
How do I fix CVE-2013-0157?
Are you affected by CVE-2013-0157?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
