Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-28085

17
FAUCET Score

CVE-2024-28085 is a low-severity vulnerability in the 'wall' utility (util-linux through 2.40), affecting Debian and kernel Linux distributions. It allows escape sequences to be sent to other users' terminals via argv, potentially leading to account takeover through crafted prompts. The CVSS score is 3.3 (LOW), indicating local access with low attack complexity and no confidentiality or availability impact, but a low integrity impact. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness and potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.24, < 2.39.4CPE matchmatch criteria
cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*
10.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

3.3LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
1.8
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.24%
Probability of exploitation in next 30 days
EPSS Percentile
81.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0224 is in the 99th percentile among its peer group of 1,511 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (10)

denopatch availablevia llm_extracted
View patch
keraspatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 util-linux 2.39.2-2 on Azure Linux 3.0Fixed in: 2.39.2-2
microsoftpatch availablevia msrc
Product: cbl2 util-linux 2.37.4-9 on CBL Mariner 2.0Fixed in: 2.37.4-9
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 2.39.2-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 2.39.2-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 2.37.4-9
microsoftpatch availablevia msrc
Product: 17773-17084Fixed in: 2.39.2-2
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 2.37.4-9
microsoftpatch availablevia msrc
Product: 20195-17086Fixed in: 2.37.4-9

Vendor Advisories (5)

microsoft2024-Oct/CVE-2024-28085

CVE-2024-28085

Oct 8, 2024
denollm-deno-b67a3af2ce0be075CRITICAL

HP ThinPro 8.0 SP 9 Security Updates

Jun 17, 2024
kerasllm-keras-7d8c31fee70361dcCRITICAL

HP ThinPro 8.0 SP 9 Security Updates

Jun 17, 2024
redhatCVE-2024-28085Low

util-linux: CVE-2024-28085: wall: escape sequence injection

Mar 27, 2024
microsoft2024-Mar/CVE-2024-28085Low

wall in util-linux through 2.40 often installed with setgid tty permissions allows escape sequences to be sent to other users' terminals through argv. (Specifically escape sequences received from stdin are blocked but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.

Mar 12, 2024

References

cert-portal.siemens.com / productcert/html/ssa-082556.html
cert-portal.siemens.com / productcert/html/ssa-202008.html
seclists.org / fulldisclosure/2024/Mar/35
github.com / skyler-ferrante/CVE-2024-28085
ExploitThird Party Advisory
github.com / util-linux/util-linux/security/advisories/GHSA-xv2h-c6ww-mrjq
Broken Link
lists.debian.org / debian-lts-announce/2024/04/msg00005.html
Mailing ListThird Party Advisory
mirrors.edge.kernel.org / pub/linux/utils/util-linux
Product
people.rit.edu / sjf5462/6831711781/wall_2_27_2024.txt
ExploitThird Party Advisory
security.netapp.com / advisory/ntap-20240531-0003
Third Party Advisory
openwall.com / lists/oss-security/2024/03/27/5
Mailing ListThird Party Advisory
openwall.com / lists/oss-security/2024/03/27/5
ExploitMailing ListThird Party Advisory
openwall.com / lists/oss-security/2024/03/27/6
Mailing ListThird Party Advisory
openwall.com / lists/oss-security/2024/03/27/7
Mailing ListPatchThird Party Advisory
openwall.com / lists/oss-security/2024/03/27/8
Mailing ListPatchThird Party Advisory
openwall.com / lists/oss-security/2024/03/27/9
Mailing ListPatchThird Party Advisory
openwall.com / lists/oss-security/2024/03/28/1
Mailing ListPatchThird Party Advisory
openwall.com / lists/oss-security/2024/03/28/2
Mailing ListThird Party Advisory
openwall.com / lists/oss-security/2024/03/28/3
Mailing ListPatchThird Party Advisory