{"id":"CVE-2021-37600","revision":"9061b8bb6dee470b891f945796fbb95a","records":[{"revision":"9061b8bb6dee470b891f945796fbb95a","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2021-37600","aliases":[],"title":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GN…","description":"An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GNU C Library environments, and possibly in all realistic environments.","state":0,"publishedAt":"2021-07-28T00:00:00+00:00","modifiedAt":"2026-10-14T11:49:11.871+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://github.com/karelzak/util-linux/issues/1395","https://github.com/karelzak/util-linux/commit/1c9143d0c1f979c3daf10e1c37b5b1e916c22a1c","https://security.netapp.com/advisory/ntap-20210902-0002/","https://security.gentoo.org/glsa/202401-08","https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2021-37600","license":"CVE Program Terms of Use","key":"cve-program:CVE-2021-37600","identifiers":["CVE-2021-37600"]},"retained":false,"historicalAffected":[]}],"coverage":[]}