Wind River Support Network

HomeDefectsLIN9-3317

Acknowledged

LIN9-3317 : Security Advisory - util-linux - CVE-2016-2779

Created: Feb 9, 2017 Updated: Aug 6, 2019

Found In Version: 9.0.0.2

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-2779

CVEs

CVE-2016-2779