CVE-2024-28085

Currently unrated

Key Information:

Vendor: CVE Published:; 27 March 2024

Badges

👾 Exploit Exists🟡 Public PoC📰 News Worthy

Summary

The highlighted vulnerability is CVE-2024-28085, which affects the "wall" command of the util-linux package on certain Linux distributions. It is a decade-old vulnerability that, if exploited, can lead to user password leaks and clipboard hijacking. The vulnerability arises from improperly filtered escape sequences in the command line arguments, allowing unprivileged users to interfere with terminals when specific criteria are met. CVE-2024-28085 can potentially lead to account takeovers and has been exploited on Ubuntu 22.04 and Debian Bookworm. Users are advised to update to util-linux version 2.40 to address the flaw, and security researchers have outlined potential exploitation scenarios and detailed how administrators can mitigate the risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

sleepall
Created by oditynet

News Articles

SecurityWeek

CVE-2024-28085

‘WallEscape’ Linux Vulnerability Leaks User Passwords

Vulnerability (CVE-2024-28085) in core Linux system utilities package util-linux allows attackers to leak user passwords using fake prompts.

9 months ago

4chan

CVE-2024-28085

/g/ - Wall-Escape (CVE-2024-28085) - Technology - 4chan

Wall-Escape (CVE-2024-28085) - "/g/ - Technology" is 4chan's imageboard for discussing computer hardware and software, programming, and general technology.

9 months ago