util-linux vulnerability

2024-04-1000:00:00

ubuntu.com

ubuntu

util-linux

vulnerability

fix

command line

permissions

security

6.8 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON

Releases

Ubuntu 23.10
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS

Packages

util-linux - miscellaneous system utilities

Details

USN-6719-1 fixed a vulnerability in util-linux. Unfortunately, it was
discovered that the fix did not fully address the issue. This update
removes the setgid permission bit from the wall and write utilities.

Original advisory details:

Skyler Ferrante discovered that the util-linux wall command did not filter
escape sequences from command line arguments. A local attacker could
possibly use this issue to obtain sensitive information.

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchutil-linux< 2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarchbsdextrautils< 2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarchbsdextrautils-dbgsym< 2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarchbsdutils< 1:2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarchbsdutils-dbgsym< 1:2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarcheject< 2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarcheject-dbgsym< 2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarchfdisk< 2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarchfdisk-dbgsym< 2.39.1-4ubuntu2.2UNKNOWN
Ubuntu23.10noarchlibblkid-dev< 2.39.1-4ubuntu2.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	23.10	noarch	util-linux	< 2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	bsdextrautils	< 2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	bsdextrautils-dbgsym	< 2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	bsdutils	< 1:2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	bsdutils-dbgsym	< 1:2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	eject	< 2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	eject-dbgsym	< 2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	fdisk	< 2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	fdisk-dbgsym	< 2.39.1-4ubuntu2.2	UNKNOWN
Ubuntu	23.10	noarch	libblkid-dev	< 2.39.1-4ubuntu2.2	UNKNOWN