951 matches found
Sudo before 1.9.13 does not escape control characters in log messages.
...
Sudo before 1.9.13 does not escape control characters in sudoreplay output.
...
SUSE CVE-2023-28101
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the flatpak1 command-line...
CVE-2023-28487
A flaw was found in the sudo package, shipped with Red Hat Enterprise Linux 8 and 9, where the "sudoreplay -l' command improperly escapes terminal control characters. As sudo's log messages may contain user-controlled strings, this could allow an attacker to inject terminal control commands,...
SUSE CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
SUSE CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
CVE-2023-28101
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the flatpak1 command-line...
CVE-2023-28101
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the flatpak1 command-line...
CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
DEBIAN-CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
DEBIAN-CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
Code injection
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
UBUNTU-CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
UBUNTU-CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
