wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Mar 27, 2024 |
| Debian | — | Upgrade util-linux | Apr 2, 2024 | Mar 27, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libmountUpgrade libblkidUpgrade libsmartcolsUpgrade util-linux-userUpgrade util-linuxUpgrade libfdiskUpgrade libuuid | May 13, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade util-linuxUpgrade util-linux-userUpgrade libuuidUpgrade libmountUpgrade libsmartcolsUpgrade libblkidUpgrade libfdisk | Jun 26, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libblkidUpgrade libmountUpgrade libfdiskUpgrade libuuidUpgrade libsmartcolsUpgrade util-linuxUpgrade util-linux-user | Oct 8, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libfdiskUpgrade libblkidUpgrade libmountUpgrade libsmartcolsUpgrade util-linux-userUpgrade libuuidUpgrade util-linux | Jul 17, 2024 | Mar 27, 2024 |
| Suse | — | Upgrade libmount-devel-staticUpgrade util-linuxUpgrade python3-libmountUpgrade libblkid1-32bitUpgrade libmount-develUpgrade libuuid1-32bitUpgrade libsmartcols-devel-staticUpgrade libfdisk-devel-staticUpgrade libfdisk1-32bitUpgrade libmount1-32bitUpgrade util-linux-systemdUpgrade libuuid-devel-32bitUpgrade uuiddUpgrade libfdisk-develUpgrade libsmartcols-devel-32bitUpgrade libfdisk-devel-32bitUpgrade libsmartcols-develUpgrade util-linux-langUpgrade libuuid1Upgrade libuuid-develUpgrade util-linux-tty-toolsUpgrade util-linux-extraUpgrade python-libmountUpgrade libmount1Upgrade liblastlog2-develUpgrade libfdisk1Upgrade libblkid-develUpgrade libblkid-devel-staticUpgrade libsmartcols1-32bitUpgrade libsmartcols1Upgrade libblkid1Upgrade python313-libmountUpgrade liblastlog2-2Upgrade libuuid-devel-staticUpgrade libmount-devel-32bitUpgrade lastlog2Upgrade libblkid-devel-32bit | Apr 4, 2024 | Mar 27, 2024 |
| Ubuntu | — | Upgrade util-linux | Mar 28, 2024 | Mar 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub