CVE-2004-0080: Andries Brouwer Util-Linux

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data.

Affected products

• Andries Brouwer Util-Linux: up to and including 2.11

Published 2004-03-03. Last modified 2026-06-16.