CVE-2016-2779

State: Published
Severity: Not scored
Published: Feb 7, 2017
Updated: Aug 5, 2024
Reserved: Feb 27, 2016

Description

runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=815922
[oss-security] 20160226 CVE Request: util-linux runuser tty hijacking via TIOCSTI ioctlmailing-list
[oss-security] 20160227 Re: CVE Request: util-linux runuser tty hijacking via TIOCSTI ioctlmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.