CVE-2016-2779
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI...
CVE-2016-2779 is a high vulnerability (CVSS 7.8) in Kernel Util-linux, published February 7, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 32nd percentile. Fixed in util-linux 2.31.1-0.1.
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
- Record
CVE-2016-2779- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
- Record
CVE-2016-2779- Updated
- 2026-11-02
EUVDEUVD-2016-3853 No score
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
- Record
EUVD-2016-3853- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7q5h-997q-c4x2
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI...
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
- Record
GHSA-7q5h-997q-c4x2- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
- Record
CVE-2016-2779- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-2779
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
- Record
DEBIAN-CVE-2016-2779- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2016-2779
runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
- Record
UBUNTU-CVE-2016-2779- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10279-1 No score
libblkid-devel-2.28.2-2.1 on GA media
These are all security issues fixed in the libblkid-devel-2.28.2-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10279-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
util-linuxDebian:12 |
before 2.31.1-0.1 | 2.31.1-0.1 |
util-linuxDebian:13 |
before 2.31.1-0.1 | 2.31.1-0.1 |
util-linuxDebian:14 |
before 2.31.1-0.1 | 2.31.1-0.1 |
util-linuxUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2.26.2-6ubuntu32.27-3ubuntu12.27.1-1ubuntu22.27.1-1ubuntu32.27.1-1ubuntu4 Show 15 moreShow less2.27.1-3ubuntu12.27.1-4ubuntu12.27.1-6ubuntu12.27.1-6ubuntu22.27.1-6ubuntu32.27.1-6ubuntu3.12.27.1-6ubuntu3.22.27.1-6ubuntu3.32.27.1-6ubuntu3.42.27.1-6ubuntu3.62.27.1-6ubuntu3.72.27.1-6ubuntu3.82.27.1-6ubuntu3.92.27.1-6ubuntu3.102.27.1-6ubuntu3.10+esm2 |
None known |
util-linuxopenSUSE:Tumbleweed |
before 2.28.2-2.1 | 2.28.2-2.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=815922
openwall.com/lists/oss-security/2016/02/27/1
nvd.nist.gov/vuln/detail/CVE-2016-2779
github.com/advisories/GHSA-7q5h-997q-c4x2
security-tracker.debian.org/tracker/CVE-2016-2779
Show 9 moreShow less
ubuntu.com/security/CVE-2016-2779
marc.info?l=util-linux-ng&m=145694736107128&w=2
cve.org/CVERecord?id=CVE-2016-2779
suse.com/security/cve/CVE-2013-0157