Skip to main content

CVE-2016-2781

CVE Details

Visit the official vulnerability details page for CVE-2016-2781 to learn more.

Initial Publication

02/07/2017

Last Update

06/09/2025

Third Party Dependency

coreutils

NIST CVE Summary

chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

CVE Severity

4.6

Our Official Summary

Investigation is ongoing to determine how this vulnerability affects our products.

Status

Deferred

Affected Products & Versions

VersionPaletteAIPaletteAI VerteX
1.1.0-rc.1⚠️ Impacted⚠️ Impacted
1.0.4⚠️ Impacted⚠️ Impacted

Revision History

No revisions available.