CVE-2024-28085

2024-03-2700:00:00

ubuntu.com

util-linux

setgid

escape sequences

argv

account takeover

6.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.5%

JSON

wall in util-linux through 2.40, often installed with setgid tty
permissions, allows escape sequences to be sent to other users’ terminals
through argv. (Specifically, escape sequences received from stdin are
blocked, but escape sequences received from argv are not blocked.) There
may be plausible scenarios where this leads to account takeover.

Notes

Author	Note
mdeslaur	USN-6719-1 added patches, but it turned out they were insufficient to completely fix the issue, so -2 was released which removes the setgid bit from the wall and write binaries.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchutil-linux< anyUNKNOWN
ubuntu20.04noarchutil-linux< 2.34-0.1ubuntu9.5UNKNOWN
ubuntu22.04noarchutil-linux< 2.37.2-4ubuntu3.3UNKNOWN
ubuntu23.10noarchutil-linux< 2.39.1-4ubuntu2.1UNKNOWN
ubuntu24.04noarchutil-linux< 2.39.3-9ubuntu6UNKNOWN
ubuntu14.04noarchutil-linux< anyUNKNOWN
ubuntu16.04noarchutil-linux< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	util-linux	< any	UNKNOWN
ubuntu	20.04	noarch	util-linux	< 2.34-0.1ubuntu9.5	UNKNOWN
ubuntu	22.04	noarch	util-linux	< 2.37.2-4ubuntu3.3	UNKNOWN
ubuntu	23.10	noarch	util-linux	< 2.39.1-4ubuntu2.1	UNKNOWN
ubuntu	24.04	noarch	util-linux	< 2.39.3-9ubuntu6	UNKNOWN
ubuntu	14.04	noarch	util-linux	< any	UNKNOWN
ubuntu	16.04	noarch	util-linux	< any	UNKNOWN