| Vulnerability Name: | CVE-2016-2568 (CCN-111061) | ||||||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2016-02-26 | ||||||||||||||||||||||||||||||||||||||||||||
| Published: | 2016-02-26 | ||||||||||||||||||||||||||||||||||||||||||||
| Updated: | 2022-04-18 | ||||||||||||||||||||||||||||||||||||||||||||
| Summary: | pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. | ||||||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) 6.9 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:U/RC:R)
5.2 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:U/RC:R)
| ||||||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 4.4 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-116 | ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2016-2568 Source: CCN Type: oss-sec Mailing List, Thu, 25 Feb 2016 12:15:11 +0100 CVE Request: pkexec tty hijacking via TIOCSTI ioctl Source: CCN Type: oss-sec Mailing List, Fri, 26 Feb 2016 02:05:45 -0500 (EST) Re: CVE Request: pkexec tty hijacking via TIOCSTI ioctl Source: MLIST Type: Mailing List, Third Party Advisory [oss-security] 20160226 Re: CVE Request: pkexec tty hijacking via TIOCSTI ioctl Source: MISC Type: Third Party Advisory https://access.redhat.com/security/cve/cve-2016-2568 Source: MISC Type: Mailing List, Third Party Advisory https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816062 Source: CCN Type: Red Hat Bugzilla Bug 1300746 (CVE-2016-2568) CVE-2016-2568 polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl Source: CONFIRM Type: Issue Tracking, Third Party Advisory https://bugzilla.redhat.com/show_bug.cgi?id=1300746 Source: XF Type: UNKNOWN policykit-cve20162568-priv-esc(111061) Source: MISC Type: Third Party Advisory https://ubuntu.com/security/CVE-2016-2568 Source: CCN Type: PolicyKit Web site PolicyKit | ||||||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||||||