rpm package
opensuse/util-linux-systemd&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/util-linux-systemd&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-3184 | Low | 3.7 | < 2.41.1-160000.3.1 | 2.41.1-160000.3.1 | Apr 3, 2026 | A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, pot | |
| CVE-2025-14104 | Med | 6.1 | < 2.41.1-160000.3.1 | 2.41.1-160000.3.1 | Dec 5, 2025 | A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database. |
- affected < 2.41.1-160000.3.1fixed 2.41.1-160000.3.1
A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the supplied remote hostname before setting `PAM_RHOST`. A remote attacker could exploit this by providing a specially crafted hostname, pot
- affected < 2.41.1-160000.3.1fixed 2.41.1-160000.3.1
A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.