CVE-2024-28085

LOW EPSS 80.6%
Published Mar 27, 20242y ago · Modified Jun 17, 20262w ago
3.3 CVSS 3.1
Low
Find Similar
Published Mar 27, 2024 2y ago
Last Modified Jun 17, 2026 2w ago

Description

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.

CVSS Details

Base Score
3.3
Exploitability
1.8
Impact
1.4
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity Low
Availability None

Threat Intelligence

EPSS Exploit Probability
80.6% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-150

Affected Products 2

VendorProductVersionRange
kernelutil-linux*≥2.24  –  <2.39.4
debiandebian_linux10.0any

References 18

  • seclists.org http://seclists.org/fulldisclosure/2024/Mar/35
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/27/5
    ExploitMailing ListThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/27/6
    Mailing ListThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/27/7
    Mailing ListPatchThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/27/8
    Mailing ListPatchThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/27/9
    Mailing ListPatchThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/28/1
    Mailing ListPatchThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/28/2
    Mailing ListThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/28/3
    Mailing ListPatchThird Party Advisory
  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-082556.html
  • cert-portal.siemens.com https://cert-portal.siemens.com/productcert/html/ssa-202008.html
  • github.com https://github.com/skyler-ferrante/CVE-2024-28085
    ExploitThird Party Advisory
  • github.com https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq
    Broken Link
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html
    Mailing ListThird Party Advisory
  • mirrors.edge.kernel.org https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/
    Product
  • people.rit.edu https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt
    ExploitThird Party Advisory
  • security.netapp.com https://security.netapp.com/advisory/ntap-20240531-0003/
    Third Party Advisory
  • openwall.com https://www.openwall.com/lists/oss-security/2024/03/27/5
    Mailing ListThird Party Advisory

Remediation

  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/27/7
    Mailing ListPatchThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/27/8
    Mailing ListPatchThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/27/9
    Mailing ListPatchThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/28/1
    Mailing ListPatchThird Party Advisory
  • openwall.com http://www.openwall.com/lists/oss-security/2024/03/28/3
    Mailing ListPatchThird Party Advisory