We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
Reserved 2024-03-03 | Published 2024-03-27 | Updated 2024-08-26 | Assigner mitrepeople.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt
github.com/...-linux/security/advisories/GHSA-xv2h-c6ww-mrjq
mirrors.edge.kernel.org/pub/linux/utils/util-linux/
www.openwall.com/lists/oss-security/2024/03/27/5
github.com/skyler-ferrante/CVE-2024-28085
lists.debian.org/debian-lts-announce/2024/04/msg00005.html ([debian-lts-announce] 20240407 [SECURITY] [DLA 3782-1] util-linux security update)
www.openwall.com/lists/oss-security/2024/03/28/1 ([oss-security] 20240328 Re: CVE-2024-28085: Escape sequence injection in util-linux wall)
www.openwall.com/lists/oss-security/2024/03/27/6 ([oss-security] 20240327 Re: CVE-2024-28085: Escape sequence injection in util-linux wall)
www.openwall.com/lists/oss-security/2024/03/27/9 ([oss-security] 20240328 Re: CVE-2024-28085: Escape sequence injection in util-linux wall)
www.openwall.com/lists/oss-security/2024/03/27/8 ([oss-security] 20240327 Re: CVE-2024-28085: Escape sequence injection in util-linux wall)
www.openwall.com/lists/oss-security/2024/03/27/7 ([oss-security] 20240327 Re: CVE-2024-28085: Escape sequence injection in util-linux wall)
www.openwall.com/lists/oss-security/2024/03/28/2 ([oss-security] 20240328 Re: Re: CVE-2024-28085: Escape sequence injection in util-linux wall)
www.openwall.com/lists/oss-security/2024/03/28/3 ([oss-security] 20240328 Re: CVE-2024-28085: Escape sequence injection in util-linux wall)
www.openwall.com/lists/oss-security/2024/03/27/5 ([oss-security] 20240327 CVE-2024-28085: Escape sequence injection in util-linux wall)
security.netapp.com/advisory/ntap-20240531-0003/
Support options
