chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

The version of coreutils installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-2781 advisory.

  - chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via     a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer. (CVE-2016-2781)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - coreutils: memory corruption flaw in parse_datetime() (CVE-2014-9471)

  - coreutils: Non-privileged session can escape to the parent session in chroot (CVE-2016-2781)

  - coreutils: race condition vulnerability in chown and chgrp (CVE-2017-18018)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - coreutils: memory corruption flaw in parse_datetime() (CVE-2014-9471)

  - coreutils: Non-privileged session can escape to the parent session in chroot (CVE-2016-2781)

  - coreutils: race condition vulnerability in chown and chgrp (CVE-2017-18018)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Severity
201262	CBL Mariner 2.0 Security Update: coreutils (CVE-2016-2781)	Nessus	MarinerOS Local Security Checks	medium
198445	RHEL 6 : coreutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
198383	RHEL 7 : coreutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2016-2781

medium

Tenable Plugins

medium

medium

medium