CVE-2016-2779 runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
HighCVSS 7.8
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/util-linux(Debian:12) | < 2.31.1-0.1 | 2.31.1-0.1 |
| debian/util-linux(Debian:13) | < 2.31.1-0.1 | 2.31.1-0.1 |
| debian/util-linux(Debian:14) | < 2.31.1-0.1 | 2.31.1-0.1 |
| kernel util-linux | = 2.24.2-1 | No fix listed |
References
- Debian Security Tracker CVE-2016-2779 vendor-advisory
- [oss-security] 20160226 CVE Request: util-linux runuser tty hijacking via TIOCSTI ioctl mailing-list third-party-advisory
- [oss-security] 20160227 Re: CVE Request: util-linux runuser tty hijacking via TIOCSTI ioctl mailing-list third-party-advisory
- bugs.debian.org issue-tracking third-party-advisory
- bugs.debian.org issue-tracking