wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Mar 27, 2024 |
| Debian | — | Upgrade util-linux | Apr 2, 2024 | Mar 27, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libmountUpgrade util-linux-userUpgrade libblkidUpgrade libsmartcolsUpgrade libuuidUpgrade util-linuxUpgrade libfdisk | May 13, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade util-linuxUpgrade util-linux-userUpgrade libsmartcolsUpgrade libuuidUpgrade libmountUpgrade libblkidUpgrade libfdisk | Jun 26, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libsmartcolsUpgrade libuuidUpgrade libblkidUpgrade libfdiskUpgrade libmountUpgrade util-linux-userUpgrade util-linux | Oct 8, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libsmartcolsUpgrade libmountUpgrade libuuidUpgrade util-linuxUpgrade util-linux-userUpgrade libblkidUpgrade libfdisk | Jul 17, 2024 | Mar 27, 2024 |
| Suse | — | Upgrade libblkid-develUpgrade libfdisk1Upgrade libuuid1Upgrade libblkid1Upgrade libuuid-develUpgrade libblkid-devel-32bitUpgrade libmount1Upgrade liblastlog2-develUpgrade python313-libmountUpgrade liblastlog2-2Upgrade lastlog2Upgrade libuuid-devel-staticUpgrade libsmartcols1-32bitUpgrade libmount-devel-32bitUpgrade util-linux-langUpgrade libblkid-devel-staticUpgrade libsmartcols1Upgrade util-linux-tty-toolsUpgrade libsmartcols-develUpgrade python-libmountUpgrade util-linux-extraUpgrade libsmartcols-devel-staticUpgrade libfdisk-devel-staticUpgrade uuiddUpgrade libsmartcols-devel-32bitUpgrade libmount-devel-staticUpgrade libfdisk-develUpgrade libfdisk1-32bitUpgrade python3-libmountUpgrade libuuid1-32bitUpgrade libmount-develUpgrade libblkid1-32bitUpgrade libfdisk-devel-32bitUpgrade libmount1-32bitUpgrade util-linux-systemdUpgrade libuuid-devel-32bitUpgrade util-linux | Apr 4, 2024 | Mar 27, 2024 |
| Ubuntu | — | Upgrade util-linux | Mar 28, 2024 | Mar 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub