A vulnerability that allows injecting escape sequences into foreign terminals
A vulnerability (CVE-2024-28085) has been discovered in the wall utility, provided in the util-linux package, which is designed to send messages to terminals, allowing for an attack on other users' terminals through manipulation of escape sequences. The issue arises because the wall utility blocks the use of escape sequences in the input stream but fails to perform this operation for command-line arguments, allowing an attacker to execute escape sequences […]
