Lucene search
Alpine Linux Development TeamALPINE:CVE-2024-28085HistoryMar 27, 2024 - 7:15 p.m.
CVE-2024-28085
2024-03-2719:15:48
Alpine Linux Development Team
security.alpinelinux.org
13
cve-2024-28085
setgid permissions
escape sequences
account takeover
unix
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users’ terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | util-linux | < 2.40-r0 | UNKNOWN |
Related
mageia
mageia
Updated util-linux packages fix security vulnerability
2024-04-06 22:53:46
openvas
openvas
Slackware: Security Advisory (SSA:2024-088-02)
2024-03-29 00:00:00
Ubuntu: Security Advisory (USN-6719-2)
2024-04-11 00:00:00
Mageia: Security Advisory (MGASA-2024-0112)
2024-04-09 00:00:00
osv
osv
util-linux vulnerability
2024-04-10 12:24:42
util-linux - security update
2024-03-31 00:00:00
util-linux vulnerability
2024-03-27 15:23:13
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : util-linux vulnerability (USN-6719-1)
2024-03-27 00:00:00
SUSE SLES15 Security Update : util-linux (SUSE-SU-2024:1106-1)
2024-04-08 00:00:00
EulerOS 2.0 SP10 : util-linux (EulerOS-SA-2024-1604)
2024-05-09 00:00:00
packetstorm
packetstorm
util-linux wall Escape Sequence Injection
2024-03-28 00:00:00
ubuntu
ubuntu
util-linux vulnerability
2024-03-27 00:00:00
util-linux vulnerability
2024-04-10 00:00:00
redos
redos
ROS-20240425-06
2024-04-25 00:00:00
ROS-20240425-07
2024-04-25 00:00:00
ubuntucve
ubuntucve
CVE-2024-28085
2024-03-27 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-28085
2024-03-11 00:15:03
cvelist
cvelist
CVE-2024-28085
2024-03-27 00:00:00
debian
debian
[SECURITY] [DSA 5650-1] util-linux security update
2024-03-31 11:50:05
[SECURITY] [DLA 3782-1] util-linux security update
2024-04-07 10:41:20
veracode
veracode
Escape Sequence Injection
2024-04-08 12:41:53
f5
f5
K000139140 : util-linux vulnerability CVE-2024-28085
2024-04-01 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-28085 affecting package util-linux for versions less than 2.37.4-9
2024-04-19 23:01:58
redhatcve
redhatcve
CVE-2024-28085
2024-03-27 19:52:40
debiancve
debiancve
CVE-2024-28085
2024-03-27 19:15:48
slackware
slackware
[slackware-security] util-linux
2024-03-28 21:56:23
cve
cve
CVE-2024-28085
2024-03-27 19:15:48
thn
thn
New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking
2024-03-29 10:49:00