CVE-2016-2781

ADVISORY - nist

Summary

chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

EPSS Score⁠: 0.00086 (0.260)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-20⁠

Improper Input Validation

ADVISORY - redhat

CWE-270⁠

Privilege Context Switching Error

Impacted images

Advisories

NIST

CREATED

8 years ago

UPDATED

24 days ago

ADVISORY IDCVE-2016-2781⁠

EXPLOITABILITY SCORE

1.5

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-20⁠

CVSS SCORE

4.6medium

Debian

CREATED

8 years ago

UPDATED

2 months ago

ADVISORY IDCVE-2016-2781⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

8 years ago

UPDATED

1 month ago

ADVISORY IDCVE-2016-2781⁠

EXPLOITABILITY SCORE

2.0

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.5low

Red Hat

CREATED

9 years ago

UPDATED

4 months ago

ADVISORY IDCVE-2016-2781⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-270⁠

CVSS SCORE

8.6medium

Chainguard

CREATED

3 months ago

UPDATED

3 months ago

ADVISORY ID

CGA-758j-cqx5-pjx9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY