chroot in GNU coreutils when used with --userspec allows local users to escape to the parent session via a crafted TIOCSTI ioctl call which pushes characters to the terminal's input buffer.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

GNU coreutils chroot with --userspec allows local escape to the parent session via crafted terminal input control.

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	4 Sep 202522:39	–	ibm
AlpineLinux	CVE-2016-2781	7 Feb 201715:00	–	alpinelinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
Tenable Nessus	Azure Linux 3.0 Security Update: coreutils (CVE-2016-2781)	14 Jun 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: coreutils (CVE-2016-2781)	2 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 6 : coreutils (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : coreutils (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 6 : coreutils (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 7 : coreutils (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus