Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU coreutils 安全漏洞
Vulnerability Description
GNU Coreutils（GNU Core Utilities，GNU核心工具组）是GNU计划开发的一个包含了多个类Unix所需的基本工具的软件包，如textutils（文本工具组）、shellutils（shell工具组）、fileutils（文件工具组）等。 GNU coreutils中的chroot存在安全漏洞。本地攻击者可借助特制的TIOCSTI ioctl调用利用该漏洞转换到父会话。
CVSS Information
N/A
Vulnerability Type
N/A