https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T22:05:52.397563+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-28085 CVE-2024-28085 2026-10-08T22:05:52.410386+00:00

Affected: kernel util-linux, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, Siemens RUGGEDCOM ROX MX5000, Siemens RUGGEDCOM ROX MX5000RE, Siemens RUGGEDCOM ROX RX1400, Siemens RUGGEDCOM ROX RX1500, Siemens RUGGEDCOM ROX RX1501, Siemens RUGGEDCOM ROX RX1510 and 5 more

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.

 https://vulnerability.circl.lu/vuln/usn-6719-1 USN-6719-1 — util-linux vulnerability 2026-10-08T22:05:52.410511+00:00

Affected: Ubuntu:20.04:LTS: util-linux, Ubuntu:22.04:LTS: util-linux

Skyler Ferrante discovered that the util-linux wall command did not filter escape sequences from command line arguments. A local attacker could possibly use this issue to obtain sensitive information.