Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
rosalinuxROSA LABROSA-SA-2024-2458
HistoryJul 31, 2024 - 9:07 a.m.

Advisory ROSA-SA-2024-2458

2024-07-3109:07:30
ROSA LAB
abf.rosalinux.ru
4
rosa
sudo
virtualization
cve-2022-43995
bdu-id
crypt() function
denial of service

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.7

Confidence

Low

JSON

Software: sudo 1.8.29
OS: ROSA Virtualization 2.1

package_evr_string: sudo-1.8.29

CVE-ID: CVE-2022-43995
BDU-ID: 2022-06664
CVE-Crit: MEDIUM.
CVE-DESC.: A vulnerability in the implementation of the crypt() function of the Sudo system administration program is related to the ability to read outside of the buffer in memory when processing the plugins/sudoers/auth/passwd.c file. Exploitation of the vulnerability could allow an attacker to cause a denial of service
CVE-STATUS: Not Relevant
CVE-REV:

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchsudo< 1.8.29UNKNOWN

Related

nessus 32
openvas 25
ubuntucve 1
osv 2
cve 1
redhatcve 1
veracode 1
prion 1
cbl_mariner 2
slackware 1
nvd 1
gentoo 1
debiancve 1
redos 1
freebsd 1
mageia 1
cvelist 1
alpinelinux 1
photon 2
rosalinux 1
nessus
nessus
NewStart CGSL MAIN 6.06 : sudo Vulnerability (NS-SA-2023-0135)
2023-11-09 00:00:00
EulerOS 2.0 SP8 : sudo (EulerOS-SA-2023-1337)
2023-02-08 00:00:00
GLSA-202211-08 : sudo: Heap-Based Buffer Overread
2022-11-22 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1516)
2023-03-09 00:00:00
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1400)
2023-02-10 00:00:00
Mageia: Security Advisory (MGASA-2022-0426)
2022-11-18 00:00:00
ubuntucve
ubuntucve
CVE-2022-43995
2022-11-02 00:00:00
osv
osv
sudo-1.9.12-3.1 on GA media
2024-06-15 00:00:00
CVE-2022-43995
2022-11-02 14:15:16
cve
cve
CVE-2022-43995
2022-11-02 14:15:16
redhatcve
redhatcve
CVE-2022-43995
2022-11-03 19:55:57
veracode
veracode
Heap-Based Buffer Over-Read
2023-01-25 20:13:57
prion
prion
Heap overflow
2022-11-02 14:15:00
cbl_mariner
cbl_mariner
CVE-2022-43995 affecting package sudo 1.9.5p2-2
2022-11-24 00:45:36
CVE-2022-43995 affecting package sudo for versions less than 1.9.12p1-1
2022-11-30 04:44:03
slackware
slackware
[slackware-security] sudo
2022-11-05 19:28:47
nvd
nvd
CVE-2022-43995
2022-11-02 14:15:16
gentoo
gentoo
sudo: Heap-Based Buffer Overread
2022-11-22 00:00:00
debiancve
debiancve
CVE-2022-43995
2022-11-02 14:15:16
redos
redos
ROS-20221121-01
2022-11-21 00:00:00
freebsd
freebsd
sudo -- Potential out-of-bounds write for small passwords
2022-11-07 00:00:00
mageia
mageia
Updated sudo packages fix security vulnerability
2022-11-17 18:45:52
cvelist
cvelist
CVE-2022-43995
2022-11-02 00:00:00
alpinelinux
alpinelinux
CVE-2022-43995
2022-11-02 14:15:16
photon
photon
Important Photon OS Security Update - PHSA-2022-4.0-0279
2022-11-10 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0485
2022-11-10 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2189
2023-07-11 14:30:55

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.7

Confidence

Low

JSON
Related for ROSA-SA-2024-2458
nessus32openvas25ubuntucve1osv2cve1redhatcve1veracode1prion1cbl_mariner2slackware1nvd1gentoo1debiancve1redos1freebsd1mageia1cvelist1alpinelinux1photon2rosalinux1