Sudo before 1.9.13 does not escape control characters in sudoreplay output.

...

SUSE CVE-2023-28101

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the flatpak1 command-line...

CVE-2023-28487

A flaw was found in the sudo package, shipped with Red Hat Enterprise Linux 8 and 9, where the "sudoreplay -l' command improperly escapes terminal control characters. As sudo's log messages may contain user-controlled strings, this could allow an attacker to inject terminal control commands,...

SUSE CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

SUSE CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28101

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the flatpak1 command-line...

CVE-2023-28101

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the flatpak1 command-line...

DEBIAN-CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

DEBIAN-CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

UBUNTU-CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

UBUNTU-CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

Code injection

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

Sudo 安全漏洞

Sudo is a program used on Unix-like systems that allows users to execute commands in a secure manner with special privileges. A security vulnerability exists in versions of Sudo prior to 1.9.13 that stems from the fact that Sudo does not escape control characters in sudoreplay output...

CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28486

CVE-2023-28486 affects the sudo utility; the affected component is sudo prior to version 1.9.13, which does not escape control characters in log messages. Multiple connected advisories confirm the issue and subsequent fixes across distributions (e.g., Debian LTS advisory DLA-4472-1 for sudo 1.9.5...