AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-28085

LOW · CVSS 3.3 EPSS 2.24% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-03-27 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.3. It affects Linux. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2024-28085
Severity
LOW
CVSS
3.3
EPSS
2.24%
Linux

Original NVD Description

wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequences to be sent to other users' terminals through argv. (Specifically, escape sequences received from stdin are blocked, but escape sequences received from argv are not blocked.) There may be plausible scenarios where this leads to account takeover.

Related CVEs

Other vulnerabilities affecting the same vendor(s)