Lucene search
+L

CVE-2023-7090 Sudo: improper handling of ipa_hostname leads to privilege mismanagement

🗓️ 23 Dec 2023 22:33:13Reported by redhatType 
cvelist
 cvelist
🔗 www.cve.org👁 57 Views

Flaw in Sudo handling ipa_hostname leads to privilege mismanagemen

Related
Affected
Refs
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2023-7090
23 Dec 202323:15
–attackerkb
astralinux
AstraLinux
Astra Linux – Vulnerability in sudo
14 Sep 202612:41
–astralinux
bdu_fstec
BDU FSTEC
sudo Privilege Bypass
13 Feb 202400:00
–bdu_fstec
circl
Circl
CVE-2023-7090
24 Dec 202300:26
–circl
cnnvd
CNNVD
sudo security vulnerability
23 Dec 202300:00
–cnnvd
cve
CVE
CVE-2023-7090
23 Dec 202322:33
–cve
debian
Debian
[SECURITY] [DLA 3732-1] sudo security update
3 Feb 202409:27
–debian
debiancve
Debian CVE
CVE-2023-7090
23 Dec 202322:33
–debiancve
nessus
Tenable Nessus
Debian dla-3732 : sudo - security update
3 Feb 202400:00
–nessus
nessus
Tenable Nessus
EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1187)
8 Feb 202400:00
–nessus
Rows per page
[
  {
    "product": "sudo",
    "vendor": "n/a",
    "versions": [
      {
        "version": "1.8.28",
        "status": "unaffected"
      }
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "sudo",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "sudo",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "sudo",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "sudo",
    "defaultStatus": "unaffected",
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:9"
    ]
  },
  {
    "product": "Fedora",
    "vendor": "Fedora",
    "collectionURL": "https://packages.fedoraproject.org/",
    "packageName": "sudo",
    "defaultStatus": "unaffected"
  },
  {
    "product": "Fedora",
    "vendor": "Fedora",
    "collectionURL": "https://packages.fedoraproject.org/",
    "packageName": "freeipa",
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Mar 2024 11:05Current
8.8High risk
Vulners AI Score8.8
CVSS 3.16.6
EPSS0.00687
57