[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-hKS3v6Nsygi5QQbrsJsvHyAGrJ9jB7zox_U0SvXDN0":3,"g5a-risk:CVE-2024-28085":204},{"success":4,"data":5,"meta":201},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":45,"references":46,"referencesCount":145,"weaknesses":146,"weaknessesCount":155,"isActivelyExploited":156,"cisaInfo":25,"otxData":25,"relatedBlogPosts":157,"seoMetadata":158,"configurations":183,"relatedVendorCves":199,"notableEvents":200},"CVE-2024-28085","What is CVE-2024-28085?","wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.","wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Spe...","2024-03-27T19:15:48.367","2026-06-17T07:20:56.09",3.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED",null,1.8,1.4,[],[],[],0.02242,[31,31,31,31,31,31,31],"Low",[35,40],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"kernel","util-linux","*","cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*",{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",2,[47,54,57,61,64,67,70,73,76,80,84,88,93,97,101,104,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,142],{"url":48,"source":49,"tags":50},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F27\u002F5","Openwall",[51,52,53],"Exploit","Mailing List","Third Party Advisory",{"url":55,"source":49,"tags":56},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F27\u002F6",[52,53],{"url":58,"source":49,"tags":59},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F27\u002F7",[52,60,53],"Patch",{"url":62,"source":49,"tags":63},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F27\u002F8",[52,60,53],{"url":65,"source":49,"tags":66},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F27\u002F9",[52,60,53],{"url":68,"source":49,"tags":69},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F28\u002F1",[52,60,53],{"url":71,"source":49,"tags":72},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F28\u002F2",[52,53],{"url":74,"source":49,"tags":75},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F28\u002F3",[52,60,53],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fgithub.com\u002Fskyler-ferrante\u002FCVE-2024-28085","GitHub",[51,53],{"url":81,"source":78,"tags":82},"https:\u002F\u002Fgithub.com\u002Futil-linux\u002Futil-linux\u002Fsecurity\u002Fadvisories\u002FGHSA-xv2h-c6ww-mrjq",[83],"Broken Link",{"url":85,"source":86,"tags":87},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F04\u002Fmsg00005.html","Debian",[52,53],{"url":89,"source":90,"tags":91},"https:\u002F\u002Fmirrors.edge.kernel.org\u002Fpub\u002Flinux\u002Futils\u002Futil-linux\u002F","Kernel",[92],"Product",{"url":94,"source":95,"tags":96},"https:\u002F\u002Fpeople.rit.edu\u002Fsjf5462\u002F6831711781\u002Fwall_2_27_2024.txt","Rit",[51,53],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240531-0003\u002F","Netapp",[53],{"url":102,"source":49,"tags":103},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F27\u002F5",[52,53],{"url":105,"source":106,"tags":107},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2024\u002FMar\u002F35","Seclists",[],{"url":48,"source":49,"tags":109},[51,52,53],{"url":55,"source":49,"tags":111},[52,53],{"url":58,"source":49,"tags":113},[52,60,53],{"url":62,"source":49,"tags":115},[52,60,53],{"url":65,"source":49,"tags":117},[52,60,53],{"url":68,"source":49,"tags":119},[52,60,53],{"url":71,"source":49,"tags":121},[52,53],{"url":74,"source":49,"tags":123},[52,60,53],{"url":77,"source":78,"tags":125},[51,53],{"url":81,"source":78,"tags":127},[83],{"url":85,"source":86,"tags":129},[52,53],{"url":89,"source":90,"tags":131},[92],{"url":94,"source":95,"tags":133},[51,53],{"url":98,"source":99,"tags":135},[53],{"url":102,"source":49,"tags":137},[52,53],{"url":139,"source":140,"tags":141},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-082556.html","Siemens",[],{"url":143,"source":140,"tags":144},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-202008.html",[],33,[147],{"id":148,"name":149,"description":150,"extendedDescription":151,"status":152,"abstraction":153,"structure":154},"CWE-150","Improper Neutralization of Escape, Meta, or Control Sequences","The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as escape, meta, or control character sequences when they are sent to a downstream component.","As data is parsed, an injected\u002Fabsent\u002Fmalformed delimiter may cause the process to take unexpected actions.","Incomplete","Variant","Simple",1,false,[],{"title":159,"metaDescription":160,"keywords":161,"canonicalUrl":162,"structuredData":163},"What is CVE-2024-28085? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-28085, a low severity cyber security vulnerability from 2024. wall in util-linux through 2.40, often installed with setgid...","CVE-2024-28085, CVE-2024-28085 vulnerability, CVE-2024-28085 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, kernel security, debian security, util-linux vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2024-28085",{"@context":164,"@type":165,"headline":159,"description":160,"datePublished":10,"dateModified":11,"author":166,"publisher":170,"about":174,"mainEntityOfPage":178,"articleSection":181,"keywords":182},"https:\u002F\u002Fschema.org","TechArticle",{"@type":167,"name":168,"url":169},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":167,"name":168,"url":169,"logo":171},{"@type":172,"url":173},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":175,"name":6,"description":176,"additionalType":177},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":179,"@id":180},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-28085","Cybersecurity","CVE-2024-28085, CVE-2024-28085 vulnerability, CVE-2024-28085 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[184,193],{"Operator":25,"Negate":25,"Nodes":185},[186],{"Operator":187,"Negate":156,"CPEMatch":188},"OR",[189],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":190,"VersionStartExcluding":25,"VersionStartIncluding":191,"VersionEndExcluding":192,"VersionEndIncluding":25},"6CE163CD-0107-4CF0-B1D1-DA619DC8C774","2.24","2.39.4",{"Operator":25,"Negate":25,"Nodes":194},[195],{"Operator":187,"Negate":156,"CPEMatch":196},[197],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":198,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[],{"lastModified":11,"cacheTime":202,"version":203},1792356104835,"2.0",{"score":205,"band":33,"action":206,"scoredAt":207},36,"Monitor","2026-10-16T07:01:20.085861+00:00"]