CVE-2019-18634

CVE-2019-18634 ⚠️ 此代码仅在 sudo 1.8.25 上测试过。该漏洞影响 1.8.30 版本，但在字符处理方面存在差异，导致此 PoC 无法执行（这并不能减轻漏洞的可利用性）。参见 1 ⚠️ 针对 CVE-2019-18634 的功能性利用代码，这是一个堆缓冲区溢出漏洞，当 pwfeedback 启用时，会导致 sudo =1.8.30 权限提升。 https://dylankatz.com/Analysis-of-CVE-2019-18634/ 该仓库包含一个单文件脚本（self-contained.sh）以及用于生成该脚本的脚本（位于 src 目录下）。 感谢 yuu...

saleemrashid-sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Credit to Joe Vennix from Apple Information Security for finding the bug...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 感谢Apple Information Security的Joe Vennix发现此漏洞。...

CVE-2019-18634

VULNERABILIDAD DE SUDO CVE-2019-18634 Exploit desarrollado en Python para la vulnerabilidad de Sudo BSS overflow CVE-2019-18634. Con fines de estudio USO python run.py Créditos https://github.com/Plazmaz/CVE-2019-18634 https://bestwing.me/CVE-2019-18634-analysis.html...

CVE-2019-18634

CVE-2019-18634 exploit funcional en Python para Ubuntu 20.04, versión de sudo 1.8.25 reemplace "./shell.sh" con su reverse shell análisis completo en https://y3a.github.io/2021/04/17/sudo-cve-analysis/...

CVE-2019-18634

CVE-2019-18634...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 感谢 Joe Vennix（来自 Apple 信息安全部门）发现此漏洞。...

-CVE-2019-18634-sudo-pwfeedback

-CVE-2019-18634-sudo-pwfeedback Resumen Este repositorio contiene una prueba de concepto PoC para CVE-2019-18634, una vulnerabilidad en sudo que afecta a sistemas con la opción pwfeedback habilitada. La vulnerabilidad permite a un atacante local escalar privilegios a root explotando un...

cve-2019-18634

cve-2019-18634 The analysis of the above CVE was my project for one of my school modules. For the full analysis please refer to the slide deck in this repo...

MiracleLinux 7 : sudo-1.8.23-4.el7.2 (AXSA:2020-4467:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-4467:01 advisory. sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 Tenable has extracted the preceding description block directly from the...

MiracleLinux 8 : sudo-1.8.25p1-8.el8.1 (AXSA:2020-117:04)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-117:04 advisory. sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 Tenable has extracted the preceding description block directly from the MiracleLin...

TencentOS Server 3: sudo (TSSA-2022:0113)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0113 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Exploit for Out-of-bounds Write in Sudo_Project Sudo

CVE-2019-18634 N-Day Exploit Slides https://docs.googl...

SUSE: Security Advisory (SUSE-SU-2020:0406-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2021-1627)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : sudo (CESA-2020:0487)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:0487 advisory. - sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 Note that Nessus has not tested for this issue but has instead relied only on the...

NewStart CGSL CORE 5.05 / MAIN 5.05 : sudo Vulnerability (NS-SA-2020-0096)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has sudo packages installed that are affected by a vulnerability: - In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. pwfeedback is ...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2020-2238)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : sudo (EulerOS-SA-2020-2238)

According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process...

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2020-2237)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...