Fixed
Created: Mar 27, 2024
Updated: Jun 8, 2024
Resolved Date: Jun 2, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.11
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.
CREATE(Triage):(User=admin) CVE-2024-28085 (https://nvd.nist.gov/vuln/detail/CVE-2024-28085)
