Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-28085

Fixed in a distro release EPSS 2%CVSS 3.3

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.

Published 2024-03-27 · CVE record · OSV

Products: kernel util-linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, Siemens RUGGEDCOM ROX MX5000, Siemens RUGGEDCOM ROX MX5000RE, Siemens RUGGEDCOM ROX RX1400, Siemens RUGGEDCOM ROX RX1500, Siemens RUGGEDCOM ROX RX1501, Siemens RUGGEDCOM ROX RX1510, Siemens RUGGEDCOM ROX RX1511, Siemens RUGGEDCOM ROX RX1512, Siemens RUGGEDCOM ROX RX1524, Siemens RUGGEDCOM ROX RX1536, Siemens RUGGEDCOM ROX RX5000

Distro releases

ReleasePackageFixed in
Alpine 3.20util-linux2.40-r0
Alpine 3.21util-linux2.40-r0
Alpine 3.22util-linux2.40-r0
Alpine 3.23util-linux2.40-r0
Alpine 3.24util-linux2.40-r0
Debian 10util-linux2.33.1-0.1+deb10u1
Debian 11util-linux2.36.1-8+deb11u2
Debian 12util-linux2.38.1-5+deb12u1
Debian 13util-linux2.39.3-11
Debian 14util-linux2.39.3-11
SUSE Enterprise Storage 7.1util-linux2.36.2-150300.4.41.1
SUSE Enterprise Storage 7.1util-linux-systemd2.36.2-150300.4.41.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSutil-linux2.33.2-150100.4.45.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSutil-linux-systemd2.33.2-150100.4.45.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSutil-linux2.36.2-150300.4.41.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSutil-linux-systemd2.36.2-150300.4.41.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSutil-linux2.37.2-150400.8.29.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSutil-linux-systemd2.37.2-150400.8.29.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSutil-linux2.37.2-150400.8.29.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSutil-linux-systemd2.37.2-150400.8.29.1
SUSE Linux Enterprise Micro 5.1util-linux2.36.2-150300.4.41.1
SUSE Linux Enterprise Micro 5.1util-linux-systemd2.36.2-150300.4.41.1
SUSE Linux Enterprise Micro 5.2util-linux2.36.2-150300.4.41.1
SUSE Linux Enterprise Micro 5.2util-linux-systemd2.36.2-150300.4.41.1
SUSE Linux Enterprise Micro 5.3util-linux2.37.2-150400.8.29.1
SUSE Linux Enterprise Micro 5.3util-linux-systemd2.37.2-150400.8.29.1
SUSE Linux Enterprise Micro 5.4util-linux2.37.2-150400.8.29.1
SUSE Linux Enterprise Micro 5.4util-linux-systemd2.37.2-150400.8.29.1
SUSE Linux Enterprise Micro 5.5util-linux2.37.4-150500.9.6.1
SUSE Linux Enterprise Micro 5.5util-linux-systemd2.37.4-150500.9.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP5util-linux2.37.4-150500.9.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP5util-linux-systemd2.37.4-150500.9.6.1
SUSE Linux Enterprise Module for Basesystem 15 SP6util-linux2.39.3-150600.4.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP6util-linux-systemd2.39.3-150600.4.3.1
SUSE Linux Enterprise Module for Server Applications 15 SP5util-linux-systemd2.37.4-150500.9.6.1
SUSE Linux Enterprise Module for Server Applications 15 SP6util-linux-systemd2.39.3-150600.4.3.1
SUSE Linux Enterprise Server 12 SP5python-libmount2.33.2-4.36.1
SUSE Linux Enterprise Server 12 SP5util-linux2.33.2-4.36.1
SUSE Linux Enterprise Server 12 SP5util-linux-systemd2.33.2-4.36.1
SUSE Linux Enterprise Server 15 SP2-LTSSutil-linux2.33.2-150100.4.45.1
SUSE Linux Enterprise Server 15 SP2-LTSSutil-linux-systemd2.33.2-150100.4.45.1
SUSE Linux Enterprise Server 15 SP3-LTSSutil-linux2.36.2-150300.4.41.1
SUSE Linux Enterprise Server 15 SP3-LTSSutil-linux-systemd2.36.2-150300.4.41.1
SUSE Linux Enterprise Server 15 SP4-LTSSutil-linux2.37.2-150400.8.29.1
SUSE Linux Enterprise Server 15 SP4-LTSSutil-linux-systemd2.37.2-150400.8.29.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5python-libmount2.33.2-4.36.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5util-linux2.33.2-4.36.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5util-linux-systemd2.33.2-4.36.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2util-linux2.33.2-150100.4.45.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2util-linux-systemd2.33.2-150100.4.45.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3util-linux2.36.2-150300.4.41.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3util-linux-systemd2.36.2-150300.4.41.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4util-linux2.37.2-150400.8.29.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4util-linux-systemd2.37.2-150400.8.29.1
SUSE Linux Enterprise Software Development Kit 12 SP5util-linux2.33.2-4.36.1
SUSE Linux Enterprise Workstation Extension 12 SP5util-linux2.33.2-4.36.1
SUSE Linux Micro 6.0util-linux2.39.3-3.1
SUSE Linux Micro 6.0util-linux-systemd2.39.3-3.1
SUSE Linux Micro 6.1util-linux2.40.4-slfo.1.1_1.1
SUSE Linux Micro 6.1util-linux-systemd2.40.4-slfo.1.1_1.1
SUSE Manager Proxy 4.3util-linux2.37.2-150400.8.29.1
SUSE Manager Proxy 4.3util-linux-systemd2.37.2-150400.8.29.1
SUSE Manager Server 4.3util-linux2.37.2-150400.8.29.1
SUSE Manager Server 4.3util-linux-systemd2.37.2-150400.8.29.1
Ubuntu 14.04 LTSutil-linuxno fix
Ubuntu 18.04 LTSutil-linuxno fix
Ubuntu 20.04 LTSutil-linux2.34-0.1ubuntu9.5
Ubuntu 20.04 LTSutil-linux2.34-0.1ubuntu9.6
Ubuntu 22.04 LTSutil-linux2.37.2-4ubuntu3.4
Ubuntu 22.04 LTSutil-linux2.37.2-4ubuntu3.3
Ubuntu 24.04 LTSutil-linux2.39.3-9ubuntu6
Ubuntu Pro 16.04 LTSutil-linuxno fix
openSUSE Leap 15.5python3-libmount2.37.4-150500.9.6.1
openSUSE Leap 15.5util-linux2.37.4-150500.9.6.1
openSUSE Leap 15.5util-linux-systemd2.37.4-150500.9.6.1
openSUSE Leap 15.6python-libmount2.39.3-150600.4.3.1
openSUSE Leap 15.6util-linux2.39.3-150600.4.3.1
openSUSE Leap 15.6util-linux-systemd2.39.3-150600.4.3.1
openSUSE Leap Micro 5.3util-linux2.37.2-150400.8.29.1
openSUSE Leap Micro 5.3util-linux-systemd2.37.2-150400.8.29.1
openSUSE Leap Micro 5.4util-linux2.37.2-150400.8.29.1
openSUSE Leap Micro 5.4util-linux-systemd2.37.2-150400.8.29.1
openSUSE Tumbleweedutil-linux2.40.2-2.1