CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output...

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages...

Sudo 安全漏洞

Sudo is a program used on Unix-like systems that allows users to execute commands in a secure manner with special privileges. A security vulnerability exists in versions of Sudo prior to 1.9.13 that stems from the fact that Sudo does not escape control characters in log messages...

Important: sudo

Issue Overview: In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user-provided environment variables SUDOEDITOR, VISUAL, and EDITOR, allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege...

SUSE CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

DEBIAN-CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

UBUNTU-CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

PT-2023-1647 · Sudo +4 · Sudo +4

Name of the Vulnerable Software and Affected Versions: Sudo versions prior to 1.9.13p2 Description: The issue is related to a double free in the per-command chroot feature of the Sudo program. This can potentially allow an attacker to cause a denial of service. Recommendations: For versions prior...

Oracle Linux 6 : sudo (ELSA-2023-12143)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12143 advisory. 1.8.6p3-29.0.4.el610.3 - Fixed Privilege escalation CVE-2023-22809 for sudoedit Orabug: 35037922 Tenable has extracted the preceding description block directly...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

Sudo 资源管理错误漏洞

Sudo is a program used on Unix-like systems that allows users to execute commands with special privileges in a secure manner. A security vulnerability exists in versions prior to Sudo 1.9.13p2, which stems from the presence of a double release vulnerability...

PT-2023-35540 · Sudo · Sudo

Name of the Vulnerable Software and Affected Versions: sudo affected versions not specified Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves functions such as sudo lbuf append quoted v1 and sudoers format member int. Recommendations: At the moment, ther...

K13605: FirePass sudo vulnerability - CVE-2012-2053

Security Advisory Description Description F5 has identified a possible sudo vulnerability for FirePass. FirePass does not require a password to execute sudo commands with elevated permissions. FirePass is designed to function as a closed-box appliance with no user-level access to the underlying...

K91327225: Linux sudo process vulnerability CVE-2019-18634

Security Advisory Description In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many othe...

sudo: arbitrary file write with privileges of the RunAs user

A vulnerability was found in sudo. Exposure in how sudoedit handles user-provided environment variables leads to arbitrary file writing with privileges of the RunAs user usually root. The prerequisite for exploitation is that the current user must be authorized by the sudoers policy to edit a fil...