Escape Sequence Injection

🗓️ 08 Apr 2024 12:41:53Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 20 Views

Escape Sequence Injection in util-linux with setgid tty permissions

Reporter	Title	Published	Views	Family All 130
GithubExploit	Exploit for Improper Neutralization of Escape, Meta, or Control Sequences in Kernel Util-Linux	11 Mar 202400:15	–	githubexploit
IBM Security Bulletins	Security Bulletin: Security vulnerabilities may affect Ubuntu packages that are shipped with IBM CICS TX Advanced.	16 Jul 202412:17	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0088: util-linux (ALINUX3-SA-2024:0088)	14 May 202500:00	–	nessus
Tenable Nessus	Azure Linux 3.0 Security Update: util-linux (CVE-2024-28085)	22 Jan 202600:00	–	nessus
Tenable Nessus	Debian dla-3782 : bsdutils - security update	7 Apr 202400:00	–	nessus
Tenable Nessus	Debian dsa-5650 : bsdextrautils - security update	31 Mar 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : util-linux (EulerOS-SA-2024-1581)	9 May 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : util-linux (EulerOS-SA-2024-1604)	9 May 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : util-linux (EulerOS-SA-2024-1827)	25 Jun 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : util-linux (EulerOS-SA-2024-1848)	25 Jun 202400:00	–	nessus

Vulners

Node

util-linux_project util-linuxMatch2.36.1-1debian

AND

debian debian_linuxMatch11

util-linux_project util-linuxMatch2.37.2-3debian

AND

util-linux_project util-linuxMatch2.36.1-2debian

AND

debian debian_linuxMatch999

util-linux_project util-linuxMatch2.37.2-1debian

AND

debian debian_linuxMatch12

util-linux_project util-linuxMatch2.38-r2os

AND

util-linux_project util-linuxMatch2.39.3-r0os

AND

util-linux_project util-linuxMatch2.38.1-r3os

AND

util-linux_project util-linuxMatch2.38-r0os

AND

util-linux_project util-linuxMatch2.37-r2os

AND

util-linux_project util-linuxMatch2.39.1-r0os

AND

util-linux_project util-linuxMatch2.38.1-r0os

AND

util-linux_project util-linuxMatch2.37.4-r0os

AND

util-linux_project util-linuxMatch2.39.2-r0os

AND

util-linux_project util-linuxMatch2.39.2-r1os

AND

util-linux_project util-linuxMatch2.35.1-r2os

AND

util-linux_project util-linuxMatch2.39-r10os

AND

util-linux_project util-linuxMatch2.37.2-r0os

AND

util-linux_project util-linuxMatch2.37.2-r6os

AND

util-linux_project util-linuxMatch2.38.1-r5os

AND

util-linux_project util-linuxMatch2.35.1-r1os

AND

util-linux_project util-linuxMatch2.38.1-r1os

AND

util-linux_project util-linuxMatch2.38.1-r6os

AND

util-linux_project util-linuxMatch2.37-r4os

AND

util-linux_project util-linuxMatch2.37.2-r2os

AND

util-linux_project util-linuxMatch2.37-r0os

AND

util-linux_project util-linuxMatch2.35.2-r0os

AND

util-linux_project util-linuxMatch2.38.1-r7os

AND

util-linux_project util-linuxMatch2.36.2-r1os

AND

util-linux_project util-linuxMatch2.38-r3os

AND

util-linux_project util-linuxMatch2.36.2-r0os

AND

util-linux_project util-linuxMatch2.37.3-r0os

AND

util-linux_project util-linuxMatch2.37.3-r1os

AND

util-linux_project util-linuxMatch2.39-r6os

AND

util-linux_project util-linuxMatch2.38.1-r2os

AND

util-linux_project util-linuxMatch2.37.2-r1os

AND

util-linux_project util-linuxMatch2.37.1-r0os

AND

util-linux_project util-linuxMatch2.36.2-r2os

AND

util-linux_project util-linuxMatch2.38.1-r4os

AND

util-linux_project util-linuxMatch2.39-r3os

AND

util-linux_project util-linuxMatch2.38-r1os

AND

util-linux_project util-linuxMatch2.37.2-r7os

AND

util-linux_project util-linuxMatch2.38.1-r8os

AND

util-linux_project util-linuxMatch2.37.4-r1os

AND

util-linux_project util-linuxMatch2.39.3-r1os

AND

alpinelinux alpine_linuxMatchedge

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2024/04/msg00005.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-28085
github	www.github.com/skyler-ferrante/CVE-2024-28085
github	www.github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq
mirrors	www.mirrors.edge.kernel.org/pub/linux/utils/util-linux/
people	www.people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt
security	www.security.netapp.com/advisory/ntap-20240531-0003/
openwall	www.openwall.com/lists/oss-security/2024/03/27/5
openwall	www.openwall.com/lists/oss-security/2024/03/27/5
openwall	www.openwall.com/lists/oss-security/2024/03/27/7

20 Mar 2025 22:11Current

7High risk

Vulners AI Score7

CVSS 3.13.3

EPSS0.10933

SSVC