CVE-2016-2568CWE-116

CVE-2016-2568

High · published February 13, 2017

CVSS v3.1
7.8
EPSS
0%
Percentile
29.0
In the wild
Unconfirmed
What it is

pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00366 · 29.0th percentile
Weakness
CWE-116 · Improper Encoding or Escaping of Output
Published
2017-02-13T23:59Z
Affected products (3)
ProductVersionsFixed in
freedesktop/polkitall versions—
redhat/enterprise_linuxall versions—
redhat/enterprise_linuxall versions—
References (10)
http://www.openwall.com/lists/oss-security/2016/02/26/3 · [email protected]https://access.redhat.com/security/cve/cve-2016-2568 · [email protected]https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816062 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=1300746 · [email protected]https://ubuntu.com/security/CVE-2016-2568 · [email protected]http://www.openwall.com/lists/oss-security/2016/02/26/3 · af854a3a-2127-422b-91ae-364da2661108https://access.redhat.com/security/cve/cve-2016-2568 · af854a3a-2127-422b-91ae-364da2661108https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816062 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=1300746 · af854a3a-2127-422b-91ae-364da2661108https://ubuntu.com/security/CVE-2016-2568 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 13 FEB 18:00Z
    pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the…
    cvelistv5