CVE-2024-28085

3.3 LOW

Published: March 27, 2024 Modified: November 04, 2025

Description

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/5

Source: cve@mitre.org

Exploit Mailing List Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/6

Source: cve@mitre.org

Mailing List Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/7

Source: cve@mitre.org

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/8

Source: cve@mitre.org

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/9

Source: cve@mitre.org

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/28/1

Source: cve@mitre.org

Mailing List Patch Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/28/2

Source: cve@mitre.org

Mailing List Third Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/28/3

Source: cve@mitre.org

Mailing List Patch Third Party Advisory

https://github.com/skyler-ferrante/CVE-2024-28085

Source: cve@mitre.org

Exploit Third Party Advisory

https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq

Source: cve@mitre.org

Broken Link

https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html

Source: cve@mitre.org

Mailing List Third Party Advisory

https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/

Source: cve@mitre.org

Product

https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt

Source: cve@mitre.org

Exploit Third Party Advisory

https://security.netapp.com/advisory/ntap-20240531-0003/

Source: cve@mitre.org

Third Party Advisory

https://www.openwall.com/lists/oss-security/2024/03/27/5

Source: cve@mitre.org

Mailing List Third Party Advisory

http://seclists.org/fulldisclosure/2024/Mar/35