Lucene search

K
redhatcveRedhat.comRH:CVE-2023-42465
HistoryDec 21, 2023 - 11:30 p.m.

CVE-2023-42465

2023-12-2123:30:30
redhat.com
access.redhat.com
52
sudo package
local attacker
bit flip
fault injection
authentication
root user
mitigation
robust logic
unintended execution
red hat product security

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.0%

A flaw was found in the sudo package. This issue could allow a local authenticated attacker to cause a bit to flip, which enables fault injection and may authenticate as the root user.

Mitigation

In general to address this issue, it's crucial to implement robust logic that prevents unintended execution from a single-bit flip.

But mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.