| Package | Affected versions | Patched versions |
|---|---|---|
| util-linux | = 2.13= 2.13.0.1= 2.13.1= 2.13.1.1= 2.14 |
Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free