122 matches found
CVE-2026-96512
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-96512 Write-up: https://abraxaslabs.tech/research/CVE-2026-96512 CVE-2026-96512 sudo 1.9.13p3 Debian bookworm - Sudo Project I am @abraxasnull. Local lab, not HTTP. The client is CVE-2026-96512-Abraxas-Labs.p...
CentOS Linux 7 [TuxCare] Security Update: sudo / sudo-devel (CENTOS7:CLSA-2026:1793183073)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793183073 advisory. - A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z...
RHEL 7 : sudo (RHSA-2026:92326)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:92326 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...
sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
RHEL 8 : sudo (RHSA-2026:92349)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:92349 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
RHEL 8 : sudo (RHSA-2026:92325)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:92325 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RHEL 9 : sudo (RHSA-2026:90287)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90287 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
MGASA-2026-0531 Updated sudo package fixes security vulnerabilities
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat. CVE-2026-82474 tz environment variable allows bypass of notbefore/notafter time-based authorization. CVE-2026-96512...
Updated sudo package fixes security vulnerabilities
Sudo through 1.9.17p2 Intercept Policy Bypass via execveat. CVE-2026-82474 tz environment variable allows bypass of notbefore/notafter time-based authorization. CVE-2026-96512...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...
RHEL 10 : sudo (RHSA-2026:86633)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:86633 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
RHEL 8 : sudo (RHSA-2026:87026)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:87026 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...