Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004014)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004014 advisory. A race condition in the Linux kernel before 5.6.2 between the VTDISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. Tenable has extracted t...

CVE-1999-0720

The ptchown command in Linux allows local users to modify TTY terminal devices that belong to other users...

EUVD-2002-0816

Malware in sbrugna...

EUVD-2007-2789

Malware in sbrugna...

EUVD-2000-0364

Malware in sbrugna...

EUVD-2006-0134

Malware in sbrugna...

EUVD-2015-6504

Malware in sbrugna...

EUVD-2000-0363

Malware in sbrugna...

flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual console

A flaw was found in Flatpak, a system for building, distributing, and running sandboxed desktop applications on Linux. It contains a vulnerability similar to CVE-2017-5226 but using the TIOCLINUX ioctl command instead of TIOCSTI. If a Flatpak app is run on a Linux virtual console such as /dev/tty...

PT-2025-49477

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the vc screen component of the Linux kernel. The flaw occurs in the vcs write function when a pointer to the vc data structure is not reloaded after ...

K17270: OpenSSH vulnerability CVE-2015-6565

Security Advisory Description sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service terminal disruption or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence...

OpenSSH Denial of Service Vulnerability

OpenSSH is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

CVE-2015-6565

sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service terminal disruption or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence...

CVE-2015-6565: Undefined Security Weakness

sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service terminal disruption or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence...

CVE-2015-6565

OpenSSH CVE-2015-6565 affects sshd on OpenSSH 6.8 and 6.9, where world-writable TTY device permissions enable local attackers to disrupt terminals or escalate: exploitation is demonstrated in exploit-db for OpenSSH 6.8/6.9, showing local privilege escalation to a root shell via abusing PTY handli...

CVE-2009-0141

XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user...

CVE-2007-2797

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals...

Design/Logic Flaw

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals...

CVE-2007-2797

xterm, including 192-7.el4 in Red Hat Enterprise Linux and 208-3.1 in Debian GNU/Linux, sets the wrong group ownership of tty devices, which allows local users to write data to other users' terminals...

CVE-2007-2797

The CVE-2007-2797 issue affects xterm: Red Hat Enterprise Linux 4 (and derivatives such as CentOS 4) packages built with a bug that caused pseudo-terminal device files to be owned by the wrong group, enabling local users to write data to other users’ terminals. Public advisories (RHSA-2007:0701, ...