Debian Security Bug TrackerDEBIANCVE:CVE-2024-28085CVE-2024-28085
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
AI Score
Confidence
Low
EPSS
Percentile
17.1%
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users’ terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | util-linux | < 2.38.1-5+deb12u1 | util-linux_2.38.1-5+deb12u1_all.deb |
| Debian | 11 | all | util-linux | < 2.36.1-8+deb11u2 | util-linux_2.36.1-8+deb11u2_all.deb |
| Debian | 999 | all | util-linux | < 2.39.3-11 | util-linux_2.39.3-11_all.deb |
| Debian | 13 | all | util-linux | < 2.39.3-11 | util-linux_2.39.3-11_all.deb |
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
AI Score
Confidence
Low
EPSS
Percentile
17.1%