Approved changes feed: RSS · Atom

cpe:2.3:a:linux:util-linux:2.13.0.1:*:*:*:*:*:*:*

part: a version: 2.13.0.1 update: *

VendorLinux (f4ceb328-5d50-5b0b-a2e1-fa3f16dc0244)
ProductUtil Linux (1f3440f5-cbe1-5862-94b4-5352fce5000a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/util-linux purl2cpe 2026-06-01 10:13:32.802129
pkg:deb/ubuntu/util-linux purl2cpe 2026-06-01 10:13:32.802131
pkg:github/util-linux/util-linux purl2cpe 2026-06-01 10:13:32.802133
pkg:gitlab/redhat/util-linux purl2cpe 2026-06-01 10:13:32.802134
pkg:rpm/fedora/util-linux purl2cpe 2026-06-01 10:13:32.802135
pkg:rpm/opensuse/util-linux purl2cpe 2026-06-01 10:13:32.802137

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1926 vulnerable 2026-06-03 14:28:42.650217 Details available
Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."
Published: 2008-04-23T17:00:00.000Z
Updated: 2024-08-07T08:40:59.909Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.