6 matches found
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Protection Mechanism Failure in Sudo (CVE-2026-82474)
Summary IBM Watson Speech Services Cartridge is vulnerable to a Protection Mechanism Failure in Sudo due to a failure to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Sudo is used in our Speech Service Runtimes. This vulnerability has been addressed...
sudo: Sudo: Policy bypass allows unauthorized program execution via execveat
A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...
sudo: Sudo: Policy bypass allows unauthorized program execution via execveat
A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...
CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...
CVE-2026-82474: Protection Mechanism Failure
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...
CVE-2026-82474: Protection Mechanism Failure
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...