EUVD-2016-3855

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

chroot in GNU coreutils allows local users to escape via a crafted TIOCSTI ioctl call

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	4 Sep 202522:39	–	ibm
AlpineLinux	CVE-2016-2781	7 Feb 201715:00	–	alpinelinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
Tenable Nessus	Azure Linux 3.0 Security Update: coreutils (CVE-2016-2781)	14 Jun 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: coreutils (CVE-2016-2781)	2 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 6 : coreutils (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : coreutils (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 6 : coreutils (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 7 : coreutils (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "407b22cd-7474-3bbc-ae09-eabe9f93d353",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2807a654-1755-321d-85fe-6a71128baab2",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2016-2781.html
openwall	www.openwall.com/lists/oss-security/2016/02/28/2
openwall	www.openwall.com/lists/oss-security/2016/02/28/3
lists	www.lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-2781
lists	www.lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772@%3Cdev.mina.apache.org%3E
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.14.6

CVSS 22.1

CVSS 36.5

EPSS0.00084

SSVC

gnu coreutils chroot local user escape tiocsti ioctl terminal input buffer