CVE-2016-2781

🗓️ 07 Feb 2017 15:59:00Reported by ubuntu.comType

chroot in GNU coreutils allows local users to escape to parent session via crafted TIOCSTI ioctl call. Pushes characters to terminal's input buffer

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for May 2023	26 Jun 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	4 Sep 202522:39	–	ibm
AlpineLinux	CVE-2016-2781	7 Feb 201715:00	–	alpinelinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
Tenable Nessus	Azure Linux 3.0 Security Update: coreutils (CVE-2016-2781)	14 Jun 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: coreutils (CVE-2016-2781)	2 Jul 202400:00	–	nessus
Tenable Nessus	RHEL 6 : coreutils (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : coreutils (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 6 : coreutils (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	RHEL 7 : coreutils (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus

Source	Link
seclists	www.seclists.org/oss-sec/2016/q1/452
lore	www.lore.kernel.org/patchwork/patch/793178/
cve	www.cve.org/CVERecord
mirrors	www.mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.28/v2.28-ReleaseNotes

31 Mar 2026 18:28Current

6.8Medium risk

Vulners AI Score6.8

CVSS 22.1

CVSS 36.5

CVSS 3.14.6

EPSS0.00079

SSVC