CVE-2024-28085
- State
- Published
- Severity
- 3.3 Low
- Published
- Mar 27, 2024
- Updated
- Oct 15, 2026
- Reserved
- Mar 3, 2024
Description
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.3 Low | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N | CISA-ADP |
Weaknesses
- CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt
- https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq
- https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/
- https://www.openwall.com/lists/oss-security/2024/03/27/5
- https://github.com/skyler-ferrante/CVE-2024-28085
- [debian-lts-announce] 20240407 [SECURITY] [DLA 3782-1] util-linux security updatemailing-list
- [oss-security] 20240328 Re: CVE-2024-28085: Escape sequence injection in util-linux wallmailing-list
- [oss-security] 20240327 Re: CVE-2024-28085: Escape sequence injection in util-linux wallmailing-list
- [oss-security] 20240328 Re: CVE-2024-28085: Escape sequence injection in util-linux wallmailing-list
- [oss-security] 20240327 Re: CVE-2024-28085: Escape sequence injection in util-linux wallmailing-list
- [oss-security] 20240327 Re: CVE-2024-28085: Escape sequence injection in util-linux wallmailing-list
- [oss-security] 20240328 Re: Re: CVE-2024-28085: Escape sequence injection in util-linux wallmailing-list
- [oss-security] 20240328 Re: CVE-2024-28085: Escape sequence injection in util-linux wallmailing-list
- [oss-security] 20240327 CVE-2024-28085: Escape sequence injection in util-linux wallmailing-list
- https://security.netapp.com/advisory/ntap-20240531-0003/
- http://seclists.org/fulldisclosure/2024/Mar/35
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-202008.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.