Lucene search
Redhat.comRH:CVE-2024-28085HistoryMar 27, 2024 - 7:52 p.m.
CVE-2024-28085
2024-03-2719:52:40
redhat.com
access.redhat.com
112
cve-2024-28085
account takeover
escape sequences
terminal
setgid permissions
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users’ terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
Related
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : util-linux vulnerability (USN-6719-1)
2024-03-27 00:00:00
SUSE SLES15 Security Update : util-linux (SUSE-SU-2024:1106-1)
2024-04-08 00:00:00
EulerOS 2.0 SP10 : util-linux (EulerOS-SA-2024-1604)
2024-05-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6719-2)
2024-04-11 00:00:00
Slackware: Security Advisory (SSA:2024-088-02)
2024-03-29 00:00:00
Mageia: Security Advisory (MGASA-2024-0112)
2024-04-09 00:00:00
packetstorm
packetstorm
util-linux wall Escape Sequence Injection
2024-03-28 00:00:00
mageia
mageia
Updated util-linux packages fix security vulnerability
2024-04-06 22:53:46
osv
osv
util-linux vulnerability
2024-04-10 12:24:42
util-linux - security update
2024-03-31 00:00:00
util-linux vulnerability
2024-03-27 15:23:13
ubuntucve
ubuntucve
CVE-2024-28085
2024-03-27 00:00:00
debian
debian
[SECURITY] [DSA 5650-1] util-linux security update
2024-03-31 11:50:05
[SECURITY] [DLA 3782-1] util-linux security update
2024-04-07 10:41:20
ubuntu
ubuntu
util-linux vulnerability
2024-03-27 00:00:00
util-linux vulnerability
2024-04-10 00:00:00
githubexploit
githubexploit
Exploit for CVE-2024-28085
2024-03-11 00:15:03
cvelist
cvelist
CVE-2024-28085
2024-03-27 00:00:00
redos
redos
ROS-20240425-06
2024-04-25 00:00:00
ROS-20240425-07
2024-04-25 00:00:00
veracode
veracode
Escape Sequence Injection
2024-04-08 12:41:53
f5
f5
K000139140 : util-linux vulnerability CVE-2024-28085
2024-04-01 00:00:00
alpinelinux
alpinelinux
CVE-2024-28085
2024-03-27 19:15:48
cbl_mariner
cbl_mariner
CVE-2024-28085 affecting package util-linux for versions less than 2.37.4-9
2024-04-19 23:01:58
debiancve
debiancve
CVE-2024-28085
2024-03-27 19:15:48
slackware
slackware
[slackware-security] util-linux
2024-03-28 21:56:23
cve
cve
CVE-2024-28085
2024-03-27 19:15:48
thn
thn
New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking
2024-03-29 10:49:00