CVE-2017-2616: debian debian_linux Privilege Defined With Unsafe Actions
CVSS: 5.5v3.0MediumModified
AliasesMGASA-2017-0072SUSE-SU-2017:0554-1SUSE-SU-2017:0555-1SUSE-SU-2018:0866-1RHSA-2017:0654RHSA-2017:0907UBUNTU-CVE-2017-2616DEBIAN-CVE-2017-2616DLA-838-1
Published 27-07-2018Last modified 09-06-2025
Vulnerability summary
CVE-2017-2616 is a medium (CVSS 5.5) Privilege Defined With Unsafe Actions vulnerability in debian debian_linux. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19% of scored vulnerabilities.
CVSS score
5.5/10
010
Medium · v3.0 (CVE.org)EPSS score
0.28%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 4 · Related 3Timeline
- 27-07-2018PublishedVulnerability first disclosed.
- 09-06-2025Last modifiedVulnerability information updated.
Description
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.
CVSS metrics
6 scores · 5 sources · 2 versionsMedium 5.5Preferred score · CVE.org (CNA)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSources5 sources · 4.7–5.5
- NVDNIST4.7MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- OSV · Red hatEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated4.7MediumCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
Medium 4.7Preferred score · NVD (NIST)
AV:L/AC:M/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
0.00 pp
From 0.28% on 18-09-2026
18-09-202618-10-2026
EPSS score0.28%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-267Privilege Defined With Unsafe ActionsA particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
- CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
Affected systems
Suse27 products
- coreutils&distro=SUSE Linux Enterprise Server 11 SP4< 8.12-6.25.33.3.1
- coreutils&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 8.12-6.25.33.3.1
- python-libmount&distro=SUSE Linux Enterprise Desktop 12 SP1< 2.25-40.2
- python-libmount&distro=SUSE Linux Enterprise Desktop 12 SP2< 2.28-44.3.3
- python-libmount&distro=SUSE Linux Enterprise Server 12 SP1< 2.25-40.2
Redhat17 products
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_server6.0 | 7.0
- enterprise_linux_server_aus7.3 | 7.4
- enterprise_linux_server_eus7.3 | 7.4 | 7.5
- enterprise_linux_workstation6.0 | 7.0
Debian4 products
- coreutils< 8.20-1
- shadow< 1:4.4-4 | < 1:4.1.5.1-1+deb7u1
- util-linux< 2.29.2-1
- debian_linuxEOL8.0
Linux1 product
- util-linux2.32.1
Mageia1 product
- util-linux< 2.25.2-3.5.mga5
Ubuntu1 product
- shadow< 1:4.1.5.1-1ubuntu9.4 | < 1:4.2-3.1ubuntu5.2
Util-linux_project1 product
- util-linux< 2.32.1
7 vendors · 52 products
References
38 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2616X Refsource CONFIRMIssue TrackingPatchThird Party Advisory
- access.redhat.com/errata/RHSA-2017:0907Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
- github.com/karelzak/util-linux/commit/dffab154d29a288aa171ff50263ecc8f2e14a891X Refsource CONFIRMPatchThird Party Advisory
