Lucene search
+L

75 matches found

OSV
OSV
•added 2026/09/23 2:17 p.m.•9 views

AZL-104940 CVE-2026-96512 affecting package sudo 1.9.17-3

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References1
OSV
OSV
•added 2026/09/23 2:17 p.m.•6 views

DEBIAN-CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References1
NVD
NVD
•added 2026/09/23 2:17 p.m.•22 views

CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS0.00133EPSS
SaveExploits2References8
UbuntuCve
UbuntuCve
•added 2026/09/23 2:17 p.m.•23 views

CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.6AI score0.00133EPSS
SaveExploits2References3
OSV
OSV
•added 2026/09/23 2:17 p.m.•8 views

UBUNTU-CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References4
CVE
CVE
•added 2026/09/23 1:22 p.m.•113 views

CVE-2026-96512

A flaw exists in sudo where time-based access restrictions (NOTBEFORE or NOTAFTER ) that omit the trailing 'Z' timezone indicator rely on the TZ environment variable inherited from the user. Because sudo is a setuid-root program, an unprivileged local user can manipulate the TZ variable to shift ...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References8
Debian CVE
Debian CVE
•added 2026/09/23 1:22 p.m.•19 views

CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2
Vulnrichment
Vulnrichment
•added 2026/09/23 1:22 p.m.•14 views

CVE-2026-96512 Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References7
Cvelist
Cvelist
•added 2026/09/23 1:22 p.m.•117 views

CVE-2026-96512 Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS0.00133EPSS
SaveExploits2References7
EUVD
EUVD
•added 2026/09/23 1:22 p.m.•15 views

EUVD-2026-85290

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References3
OSV
OSV
•added 2026/09/23 1:22 p.m.•57 views

CVE-2026-96512 Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.8AI score
SaveExploits0References12
RedhatCVE
RedhatCVE
•added 2026/09/23 1:22 p.m.•12 views

CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References4
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•7 views

PT-2026-105018

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•3 views

PT-2026-97320

Name of the Vulnerable Software and Affected Versions sudo affected versions not specified Description A flaw exists in the evaluation of time-based access restrictions in sudoers rules. When NOTBEFORE or NOTAFTER timestamps omit the trailing 'Z' timezone indicator, the system relies on the TZ...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References43
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•11 views

CVE-2026-96512: Incorrect Authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

7.8CVSS5.9AI score0.00133EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2006-5541

Malware in sbrugna...

4.6CVSS6.4AI score0.01326EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-9490

Malware in sbrugna...

3.3CVSS4.3AI score0.00474EPSS
SaveExploits1References13
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2017-16497

Malware in sbrugna...

9.8CVSS8.1AI score0.03654EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•29 views

RHEL 5 : sudo (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - sudo: noexec bypass via wordexp CVE-2016-7076 - sudo before 1.8.12 does not ensure that the TZ environmen...

7.8CVSS6.9AI score0.03295EPSS
SaveExploits7References7
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•37 views

SUSE: Security Advisory (SUSE-SU-2016:2904-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.00476EPSS
SaveExploits1References8
Rows per page
Query Builder