Lucene search

K
osvGoogleOSV:USN-6719-2
HistoryApr 10, 2024 - 12:24 p.m.

util-linux vulnerability

2024-04-1012:24:42
Google
osv.dev
5
util-linux
vulnerability
incomplete fix
sensitive information
local attacker
escape sequences

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

USN-6719-1 fixed a vulnerability in util-linux. Unfortunately, it was
discovered that the fix did not fully address the issue. This update
removes the setgid permission bit from the wall and write utilities.

Original advisory details:

Skyler Ferrante discovered that the util-linux wall command did not filter
escape sequences from command line arguments. A local attacker could
possibly use this issue to obtain sensitive information.