CVE-2018-7738 Command injection in n/a

What is CVE-2018-7738?

CVE-2018-7738 is a high-severity command injection vulnerability in n/a, published on 6 Mar 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In util-linux before 2.32-rc1, bash-completion/umount allows local users to gain privileges by embedding shell commands in a mountpoint name, which is mishandled during a umount command (within Bash) by a different user, as demonstrated by logging in as root and entering umount followed by a tab character for autocompletion.

Which versions are affected by CVE-2018-7738?

It affects 1 product.

Products include Kernel Util-Linux.

How do I fix CVE-2018-7738?

Upgrade to a fixed version.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2018-7738 being exploited?

There is no known exploitation of CVE-2018-7738 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2015-5224 Race condition in n/a Critical 9.8
• CVE-2016-2779 Privilege escalation in n/a High 7.8
• CVE-2026-13595 Util-linux: util-linux: heap use-after-free in libblkid nested partition probing Medium 6.8
• CVE-2020-21583 Command injection in n/a Medium 6.7
• CVE-2022-0563 Information disclosure in util-linux Medium 5.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2018-7738, DSA-4134-1, GHSA-jh5x-7c5f-4c44, MGASA-2018-0237, SUSE-SU-2018:2066-1, SUSE-SU-2018:2071-1 and 7 more.