runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminals input buffer.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Util-linux | Kernel | 2.24.2-1 (including) | 2.24.2-1 (including) |
Util-linux | Ubuntu | artful | * |
Util-linux | Ubuntu | esm-infra/xenial | * |
Util-linux | Ubuntu | upstream | * |
Util-linux | Ubuntu | vivid/stable-phone-overlay | * |
Util-linux | Ubuntu | vivid/ubuntu-core | * |
Util-linux | Ubuntu | wily | * |
Util-linux | Ubuntu | xenial | * |
Util-linux | Ubuntu | yakkety | * |
Util-linux | Ubuntu | zesty | * |