CVE-2016-2568

🗓️ 13 Feb 2017 18:59:00Reported by ubuntu.comType

pkexec vulnerability allows local users to escape to parent session via crafted TIOCSTI ioctl call, pushing characters to terminal's input buffer. No fix available as of 2023

Reporter	Title	Published	Views	Family All 26
AlpineLinux	CVE-2016-2568	13 Feb 201718:00	–	alpinelinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
BDU FSTEC	The vulnerability of the software platform for managing administrative policies and privileges, Policykit, is related to the lack of mechanisms for encoding or shielding output data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.	22 Nov 202200:00	–	bdu_fstec
CBLMariner	CVE-2016-2568 affecting package polkit 0.116-7	12 Jan 202509:15	–	cbl_mariner
CBLMariner	CVE-2016-2568 affecting package polkit for versions less than 123-1	15 May 202515:08	–	cbl_mariner
CBLMariner	CVE-2016-2568 affecting package polkit 0.119-4	12 Jan 202509:15	–	cbl_mariner
Circl	CVE-2016-2568	19 Mar 202600:00	–	circl
CNVD	Red Hat PolicyKit pkexec Command Execution Vulnerability	2 Mar 201600:00	–	cnvd
CVE	CVE-2016-2568	13 Feb 201718:00	–	cve
Cvelist	CVE-2016-2568	13 Feb 201718:00	–	cvelist

OS	OS Version	Architecture	Package	Filename
Ubuntu	22.04	any	policykit-1	policykit-1_0_any.deb
Ubuntu	16.04	any	policykit-1	policykit-1_0_any.deb
Ubuntu	18.04	any	policykit-1	policykit-1_0_any.deb
Ubuntu	20.04	any	policykit-1	policykit-1_0_any.deb
Ubuntu	24.04	any	policykit-1	policykit-1_0_any.deb
Ubuntu	14.04	any	policykit-1	policykit-1_0_any.deb
Ubuntu	26.04	any	policykit-1	policykit-1_0_any.deb
Ubuntu	25.10	any	policykit-1	policykit-1_0_any.deb

Source	Link
seclists	www.seclists.org/oss-sec/2016/q1/443
lore	www.lore.kernel.org/patchwork/patch/793178/
cve	www.cve.org/CVERecord

11 Jul 2025 07:38Current

7.1High risk

Vulners AI Score7.1

CVSS 24.4

CVSS 3.17.8

EPSS0.00351