CVE-2024-28085

Published: Mar 27, 2024Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.8 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.

Affected (2)

Products: Kernel: Util Linux · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Kernel Util Linux	From 2.24 to 2.39.4

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Related CWEs

CWE-150

Improper Neutralization of Escape, Meta, or Control Sequences

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as escape, meta, or control character sequences when they are sent to a downstream component.

References (33)

http://www.openwall.com/lists/oss-security/2024/03/27/5

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/6

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/7

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/8

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/27/9

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/28/1

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/28/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2024/03/28/3

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

https://github.com/skyler-ferrante/CVE-2024-28085

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq

Source: cve@mitre.org

Broken Link

https://lists.debian.org/debian-lts-announce/2024/04/msg00005.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/

Source: cve@mitre.org

Product

https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt

Source: cve@mitre.org

ExploitThird Party Advisory

https://security.netapp.com/advisory/ntap-20240531-0003/

Source: cve@mitre.org

Third Party Advisory

https://www.openwall.com/lists/oss-security/2024/03/27/5

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2024/Mar/35