wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Mar 27, 2024 |
| Debian | — | Upgrade util-linux | Apr 2, 2024 | Mar 27, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libfdiskUpgrade libuuidUpgrade util-linuxUpgrade libsmartcolsUpgrade libblkidUpgrade util-linux-userUpgrade libmount | May 13, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libblkidUpgrade libfdiskUpgrade util-linuxUpgrade util-linux-userUpgrade libmountUpgrade libuuidUpgrade libsmartcols | Jun 26, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libfdiskUpgrade libmountUpgrade libblkidUpgrade libsmartcolsUpgrade libuuidUpgrade util-linux-userUpgrade util-linux | Oct 8, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libuuidUpgrade libmountUpgrade util-linux-userUpgrade util-linuxUpgrade libsmartcolsUpgrade libblkidUpgrade libfdisk | Jul 17, 2024 | Mar 27, 2024 |
| Suse | — | Upgrade libuuid-develUpgrade libblkid1Upgrade libblkid-devel-32bitUpgrade libmount1Upgrade liblastlog2-develUpgrade libuuid1Upgrade libsmartcols1-32bitUpgrade libmount-devel-32bitUpgrade util-linux-tty-toolsUpgrade libuuid-devel-staticUpgrade util-linux-extraUpgrade lastlog2Upgrade libblkid-develUpgrade libblkid-devel-staticUpgrade libsmartcols-develUpgrade python-libmountUpgrade python313-libmountUpgrade liblastlog2-2Upgrade libfdisk1Upgrade util-linux-langUpgrade libsmartcols1Upgrade python3-libmountUpgrade libsmartcols-devel-32bitUpgrade libblkid1-32bitUpgrade uuiddUpgrade libmount1-32bitUpgrade libfdisk-devel-staticUpgrade libmount-devel-staticUpgrade libfdisk1-32bitUpgrade libfdisk-develUpgrade libuuid-devel-32bitUpgrade libsmartcols-devel-staticUpgrade libuuid1-32bitUpgrade libmount-develUpgrade util-linux-systemdUpgrade util-linuxUpgrade libfdisk-devel-32bit | Apr 4, 2024 | Mar 27, 2024 |
| Ubuntu | — | Upgrade util-linux | Mar 28, 2024 | Mar 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub