CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

UBUNTU-CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

Code injection

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

Sudo 安全漏洞

Sudo is a program used on Unix-like systems that allows users to execute commands in a secure manner with special privileges. A security vulnerability exists in versions of Sudo prior to 1.9.13 that stems from the fact that Sudo does not escape control characters in sudoreplay output...

CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28486

CVE-2023-28486 affects the sudo utility; the affected component is sudo prior to version 1.9.13, which does not escape control characters in log messages. Multiple connected advisories confirm the issue and subsequent fixes across distributions (e.g., Debian LTS advisory DLA-4472-1 for sudo 1.9.5...

CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

CVE-2023-28487

CVE-2023-28487 affects sudo up to version 1.9.13, where sudoreplay output does not escape control characters. This can enable manipulation of terminal output when viewed. Public details in connected advisories indicate fixes implemented in 1.9.13 and newer across multiple distributions (Debian, A...

Sudo 安全漏洞

Sudo is a program used on Unix-like systems that allows users to execute commands in a secure manner with special privileges. A security vulnerability exists in versions of Sudo prior to 1.9.13 that stems from the fact that Sudo does not escape control characters in log messages...

PT-2023-2285 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions prior to 1.31.2 Description: The issue is related to the lack of filtering for special control characters in Deno, a runtime for JavaScript and TypeScript. This allows a malicious program to clear the first two lines of a prompt...

PT-2023-19680 · Canonical +9 · Golang-Github-Golang-Protobuf-1-3 +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue arises when parsing invalid messages, which can cause a panic. Specifically, parsing a text-format message that contains a potential number...

Denial Of Service (DoS)

dlt-daemon is vulnerable to Denial Of Service DoS. The vulnerability exists because the configuration file fails to generate dlt logs in the system when that file contains special characters, allowing an attacker to cause an application crash...

SUSE-SU-2023:0707-1 Security update for python39

This update for python39 fixes the following issues: - CVE-2023-24329: Fixed blocklists bypass via the urllib.parse component when supplying a URL that starts with blank characters bsc1208471. Update to 3.9.16: - python -m http.server no longer allows terminal control characters sent within a...

Cross-site Scripting (XSS)

orchardcore is vulnerable to Cross-site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject log entries into the database logs, containing a malicious referrer field...

Debian: Security Advisory (DLA-473-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...

Design/Logic Flaw

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client...