CVE-2016-2781 PUBLISHED

chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

EPSS 0.08% · 22.6th percentile

Risk Scores

EPSS Score
0.08%
22.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTScoreutils8.25-2ubuntu2, 8.25-2ubuntu3~16.04, 0
Ubuntu:22.04:LTScoreutils8.32-4ubuntu3, 8.32-4ubuntu2, 0
Ubuntu:25.10coreutils9.5-1ubuntu4, 0, 9.5-1ubuntu1
Ubuntu:18.04:LTScoreutils0, 8.28-1ubuntu1, 8.26-3ubuntu4
Ubuntu:20.04:LTScoreutils8.30-3ubuntu2, 0
Ubuntu:24.04:LTScoreutils9.4-3ubuntu6, 9.4-3ubuntu6.1, 0
Ubuntu:14.04:LTScoreutils8.21-1ubuntu4, 8.20-3ubuntu5, 0

Timeline

References

Open in Interactive Console →