AZL-34628 CVE-2016-2781 affecting package coreutils for versions less than 9.4-1

🗓️ 07 Feb 2017 15:59:00Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

AZL-34628 CVE-2016-2781: coreutils chroot with --userspec enables local escape via TIOCSTI in <9.4-1.

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	4 Sep 202522:39	–	ibm
AlpineLinux	CVE-2016-2781	7 Feb 201715:00	–	alpinelinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
Tenable Nessus	Azure Linux 3.0 Security Update: coreutils (CVE-2016-2781)	14 Jun 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: coreutils (CVE-2016-2781)	2 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 6 : coreutils (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : coreutils (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 6 : coreutils (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 7 : coreutils (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-2781

21 Apr 2026 04:27Current

6.8Medium risk

Vulners AI Score6.8

CVSS 36.5

EPSS0.00084

coreutils chroot userspec mode tiocsti ioctl local escape