wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Mar 27, 2024 |
| Debian | — | Upgrade util-linux | Apr 2, 2024 | Mar 27, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libfdiskUpgrade libuuidUpgrade util-linuxUpgrade libblkidUpgrade util-linux-userUpgrade libmountUpgrade libsmartcols | May 13, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libsmartcolsUpgrade util-linux-userUpgrade libmountUpgrade util-linuxUpgrade libuuidUpgrade libfdiskUpgrade libblkid | Jun 26, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libfdiskUpgrade libmountUpgrade libsmartcolsUpgrade libblkidUpgrade libuuidUpgrade util-linux-userUpgrade util-linux | Oct 8, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libmountUpgrade util-linux-userUpgrade libsmartcolsUpgrade libuuidUpgrade util-linuxUpgrade libblkidUpgrade libfdisk | Jul 17, 2024 | Mar 27, 2024 |
| Suse | — | Upgrade libfdisk-develUpgrade libuuid-devel-32bitUpgrade libfdisk1-32bitUpgrade libuuid1-32bitUpgrade libfdisk-devel-32bitUpgrade python3-libmountUpgrade libmount-develUpgrade util-linuxUpgrade libsmartcols-devel-staticUpgrade libblkid1-32bitUpgrade util-linux-systemdUpgrade libfdisk-devel-staticUpgrade libmount-devel-staticUpgrade libmount1-32bitUpgrade uuiddUpgrade libsmartcols-devel-32bitUpgrade util-linux-langUpgrade libblkid-devel-staticUpgrade libuuid-develUpgrade libblkid-devel-32bitUpgrade libsmartcols1Upgrade libsmartcols1-32bitUpgrade lastlog2Upgrade python-libmountUpgrade libsmartcols-develUpgrade util-linux-tty-toolsUpgrade util-linux-extraUpgrade libblkid-develUpgrade libfdisk1Upgrade python313-libmountUpgrade libmount1Upgrade liblastlog2-develUpgrade libblkid1Upgrade liblastlog2-2Upgrade libuuid1Upgrade libmount-devel-32bitUpgrade libuuid-devel-static | Apr 4, 2024 | Mar 27, 2024 |
| Ubuntu | — | Upgrade util-linux | Mar 28, 2024 | Mar 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub