CVE-2016-2568 | BDVDB-2026-81530 Detail

Description#

pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2016/02/26/3
https://bugzilla.redhat.com/show_bug.cgi?id=1300746
https://access.redhat.com/security/cve/cve-2016-2568
https://ubuntu.com/security/CVE-2016-2568
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816062

Exploit#

No public exploit known

History#

Version 12017-02-13Record published in the CVE List.
Version 22026-10-08Most recent update recorded in the CVE List.