ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 15
ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 15
CVE-2024-28085
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CVE-2024-28085
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CVE-2024-28085
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CVE-2024-28085
CVE-2024-28085
wall in util-linux through 2.40, often installed with setgid tty permi ...
SUSE-SU-2024:1943-1
Security update for util-linux
SUSE-SU-2024:1172-1
Security update for util-linux
SUSE-SU-2024:1171-1
Security update for util-linux
SUSE-SU-2024:1170-1
Security update for util-linux
SUSE-SU-2024:1169-1
Security update for util-linux
SUSE-SU-2024:1106-1
Security update for util-linux
GHSA-px7f-qj7m-m4v6
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
BDU:2024-02517
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΠΏΠ°ΠΊΠ΅ΡΠ° util-linux ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ ΠΏΠΎΠ»ΡΡΠΈΡΡ Π½Π΅ΡΠ°Π½ΠΊΡΠΈΠΎΠ½ΠΈΡΠΎΠ²Π°Π½Π½ΡΠΉ Π΄ΠΎΡΡΡΠΏ ΠΊ ΠΏΠ°ΡΠΎΠ»ΡΠΌ ΠΈΠ»ΠΈ ΠΈΠ·ΠΌΠ΅Π½ΠΈΡΡ Π±ΡΡΠ΅Ρ ΠΎΠ±ΠΌΠ΅Π½Π° ΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°ΡΠ΅Π»Ρ
ROS-20240425-07
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ git
ROS-20240425-06
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ util-linux
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ | CVSS | EPSS | ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ | |
|---|---|---|---|---|
CVE-2024-28085 wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover. | CVSS3: 3.3 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
CVE-2024-28085 wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover. | CVSS3: 4.4 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
CVE-2024-28085 wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover. | CVSS3: 3.3 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
CVSS3: 3.3 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | ΠΏΠΎΡΡΠΈ 2 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄ | ||
CVE-2024-28085 wall in util-linux through 2.40, often installed with setgid tty permi ... | CVSS3: 3.3 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
SUSE-SU-2024:1943-1 Security update for util-linux | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | ΠΎΠΊΠΎΠ»ΠΎ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
SUSE-SU-2024:1172-1 Security update for util-linux | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
SUSE-SU-2024:1171-1 Security update for util-linux | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
SUSE-SU-2024:1170-1 Security update for util-linux | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
SUSE-SU-2024:1169-1 Security update for util-linux | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
SUSE-SU-2024:1106-1 Security update for util-linux | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
GHSA-px7f-qj7m-m4v6 wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover. | CVSS3: 3.3 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
BDU:2024-02517 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΠΏΠ°ΠΊΠ΅ΡΠ° util-linux ΠΎΠΏΠ΅ΡΠ°ΡΠΈΠΎΠ½Π½ΠΎΠΉ ΡΠΈΡΡΠ΅ΠΌΡ Linux, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ ΠΏΠΎΠ»ΡΡΠΈΡΡ Π½Π΅ΡΠ°Π½ΠΊΡΠΈΠΎΠ½ΠΈΡΠΎΠ²Π°Π½Π½ΡΠΉ Π΄ΠΎΡΡΡΠΏ ΠΊ ΠΏΠ°ΡΠΎΠ»ΡΠΌ ΠΈΠ»ΠΈ ΠΈΠ·ΠΌΠ΅Π½ΠΈΡΡ Π±ΡΡΠ΅Ρ ΠΎΠ±ΠΌΠ΅Π½Π° ΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°ΡΠ΅Π»Ρ | CVSS3: 8.4 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
ROS-20240425-07 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ git | CVSS3: 7.8 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | |
ROS-20240425-06 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ util-linux | CVSS3: 8.4 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 2 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ