Vulnerability Description
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
CVSS Score
4.6
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Coreutils | All versions |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2016/02/28/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2016/02/28/3Mailing ListThird Party Advisory
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430
- http://www.openwall.com/lists/oss-security/2016/02/28/2Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2016/02/28/3Mailing ListThird Party Advisory
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430
FAQ
What is CVE-2016-2781?
CVE-2016-2781 is a vulnerability with a CVSS score of 4.6 (MEDIUM). chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
How severe is CVE-2016-2781?
CVE-2016-2781 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2781?
Check the references section above for vendor advisories and patch information. Affected products include: Gnu Coreutils.