Skip to content
Commit b40a7741 authored by Soumya Sambu's avatar Soumya Sambu Committed by Steve Sakoman
Browse files

util-linux: Fix CVE-2024-28085

wall in util-linux through 2.40, often installed with setgid
tty permissions, allows escape sequences to be sent to other
users' terminals through argv. (Specifically, escape sequences
received from stdin are blocked, but escape sequences received
from argv are not blocked.) There may be plausible scenarios
where this leads to account takeover.

References:
https://nvd.nist.gov/vuln/detail/CVE-2024-28085



Signed-off-by: default avatarSoumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: default avatarSteve Sakoman <steve@sakoman.com>
parent a3f5ac9f
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment