Low severity3.3NVD Advisory· Published Mar 27, 2024· Updated May 12, 2026
CVE-2024-28085
CVE-2024-28085
Description
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
69cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*range: >=2.24,<2.39.4
- (no CPE)range: <=2.40
- util-linux/walldescription
- osv-coords65 versionspkg:rpm/opensuse/python3-libmount&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/python-libmount&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/util-linux&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/util-linux&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/util-linux&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/util-linux&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/opensuse/util-linux&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/util-linux-systemd&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/util-linux-systemd&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/util-linux-systemd&distro=openSUSE%20Leap%20Micro%205.3pkg:rpm/opensuse/util-linux-systemd&distro=openSUSE%20Leap%20Micro%205.4pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/python-libmount&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/util-linux&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP5pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/util-linux&distro=SUSE%20Linux%20Micro%206.1pkg:rpm/suse/util-linux&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/util-linux&distro=SUSE%20Manager%20Server%204.3pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOSpkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSSpkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Micro%205.1pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSSpkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Linux%20Micro%206.1pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Manager%20Proxy%204.3pkg:rpm/suse/util-linux-systemd&distro=SUSE%20Manager%20Server%204.3
< 2.37.4-150500.9.6.1+ 64 more
- (no CPE)range: < 2.37.4-150500.9.6.1
- (no CPE)range: < 2.39.3-150600.4.3.1
- (no CPE)range: < 2.37.4-150500.9.6.1
- (no CPE)range: < 2.39.3-150600.4.3.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.40.2-2.1
- (no CPE)range: < 2.37.4-150500.9.6.1
- (no CPE)range: < 2.39.3-150600.4.3.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.33.2-4.36.1
- (no CPE)range: < 2.33.2-4.36.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.33.2-150100.4.45.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.4-150500.9.6.1
- (no CPE)range: < 2.37.4-150500.9.6.1
- (no CPE)range: < 2.39.3-150600.4.3.1
- (no CPE)range: < 2.33.2-4.36.1
- (no CPE)range: < 2.33.2-150100.4.45.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.33.2-4.36.1
- (no CPE)range: < 2.33.2-150100.4.45.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.33.2-4.36.1
- (no CPE)range: < 2.33.2-4.36.1
- (no CPE)range: < 2.39.3-3.1
- (no CPE)range: < 2.40.4-slfo.1.1_1.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.33.2-150100.4.45.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.4-150500.9.6.1
- (no CPE)range: < 2.37.4-150500.9.6.1
- (no CPE)range: < 2.39.3-150600.4.3.1
- (no CPE)range: < 2.37.4-150500.9.6.1
- (no CPE)range: < 2.39.3-150600.4.3.1
- (no CPE)range: < 2.33.2-4.36.1
- (no CPE)range: < 2.33.2-150100.4.45.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.33.2-4.36.1
- (no CPE)range: < 2.33.2-150100.4.45.1
- (no CPE)range: < 2.36.2-150300.4.41.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.39.3-3.1
- (no CPE)range: < 2.40.4-slfo.1.1_1.1
- (no CPE)range: < 2.37.2-150400.8.29.1
- (no CPE)range: < 2.37.2-150400.8.29.1
Patches
Vulnerability mechanics
References
17- www.openwall.com/lists/oss-security/2024/03/27/7nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2024/03/27/8nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2024/03/27/9nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2024/03/28/1nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2024/03/28/3nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2024/03/27/5nvdExploitMailing ListThird Party Advisory
- people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txtnvdExploitThird Party Advisory
- www.openwall.com/lists/oss-security/2024/03/27/6nvdMailing ListThird Party Advisory
- www.openwall.com/lists/oss-security/2024/03/28/2nvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2024/04/msg00005.htmlnvdMailing ListThird Party Advisory
- security.netapp.com/advisory/ntap-20240531-0003/nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2024/03/27/5nvdMailing ListThird Party Advisory
- github.com/util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjqnvdBroken Link
- mirrors.edge.kernel.org/pub/linux/utils/util-linux/nvdProduct
- seclists.org/fulldisclosure/2024/Mar/35nvd
- cert-portal.siemens.com/productcert/html/ssa-082556.htmlnvd
- cert-portal.siemens.com/productcert/html/ssa-202008.htmlnvd
News mentions
0No linked articles in our index yet.