Unrated
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur...
CVE-2018-14722
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-14722 btrfsmaintenance Fixed in: 0.4.1-2
- Ubuntu UBUNTU-CVE-2018-14722 btrfsmaintenance
Original description The description as published by the source.
An issue was discovered in evaluate_auto_mountpoint in btrfsmaintenance-functions in btrfsmaintenance through 0.4.1. Code execution as root can occur via a specially crafted filesystem label if btrfs-{scrub,balance,trim} are set to auto in /etc/sysconfig/btrfsmaintenance (this is not the default, though).
References
- advisory openwall.com
- report bugzilla.suse.com
- web openwall.com
- web openwall.com
- web openwall.com