wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade util-linux | Aug 22, 2024 | Mar 27, 2024 |
| Debian | — | Upgrade util-linux | Apr 2, 2024 | Mar 27, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libfdiskUpgrade util-linuxUpgrade libuuidUpgrade libsmartcolsUpgrade libblkidUpgrade libmountUpgrade util-linux-user | May 13, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libblkidUpgrade libfdiskUpgrade util-linuxUpgrade libsmartcolsUpgrade libuuidUpgrade util-linux-userUpgrade libmount | Jun 26, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libfdiskUpgrade libuuidUpgrade libmountUpgrade libsmartcolsUpgrade libblkidUpgrade util-linux-userUpgrade util-linux | Oct 8, 2024 | Mar 27, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libmountUpgrade util-linux-userUpgrade libsmartcolsUpgrade libuuidUpgrade util-linuxUpgrade libblkidUpgrade libfdisk | Jul 17, 2024 | Mar 27, 2024 |
| Suse | — | Upgrade libblkid1-32bitUpgrade util-linuxUpgrade libmount-devel-staticUpgrade libfdisk-devel-staticUpgrade libuuid-devel-32bitUpgrade libfdisk-devel-32bitUpgrade libfdisk1-32bitUpgrade libfdisk-develUpgrade libsmartcols-devel-staticUpgrade libmount1-32bitUpgrade libuuid1-32bitUpgrade python3-libmountUpgrade libmount-develUpgrade util-linux-systemdUpgrade libsmartcols-devel-32bitUpgrade uuiddUpgrade util-linux-langUpgrade libsmartcols1Upgrade libsmartcols1-32bitUpgrade libblkid-devel-staticUpgrade libblkid-devel-32bitUpgrade libuuid1Upgrade libblkid-develUpgrade libfdisk1Upgrade libmount1Upgrade libsmartcols-develUpgrade util-linux-extraUpgrade lastlog2Upgrade python313-libmountUpgrade liblastlog2-2Upgrade libblkid1Upgrade libuuid-devel-staticUpgrade libmount-devel-32bitUpgrade util-linux-tty-toolsUpgrade python-libmountUpgrade liblastlog2-develUpgrade libuuid-devel | Apr 4, 2024 | Mar 27, 2024 |
| Ubuntu | — | Upgrade util-linux | Mar 28, 2024 | Mar 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub