CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less...

Fedora 37 : sudo (2023-d2d6ec2a32)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d2d6ec2a32 advisory. Security fix for CVE-2023-27320 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less...

CVE-2023-26604

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1, and thus other programs may be launched from the less...

USN-5908-1: Sudo vulnerability

It was discovered that Sudo incorrectly handled the per-command chroot feature. In certain environments where Sudo is configured with a rule that contains a CHROOT setting, a local attacker could use this issue to cause Sudo to crash, resulting in a denial of service, or possibly escalate...

USN-5908-1 sudo vulnerability

It was discovered that Sudo incorrectly handled the per-command chroot feature. In certain environments where Sudo is configured with a rule that contains a CHROOT setting, a local attacker could use this issue to cause Sudo to crash, resulting in a denial of service, or possibly escalate...

CVE-2023-22809 affecting package sudo 1.9.12p1-1

CVE-2023-22809 affecting package sudo 1.9.12p1-1. An upgraded version of the package is available that resolves this issue...

Ubuntu 22.04 LTS : Sudo vulnerability (USN-5908-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5908-1 advisory. It was discovered that Sudo incorrectly handled the per-command chroot feature. In certain environments where Sudo is configured with a rule that contains a CHROO...

CVE-2023-27320

A double-free vulnerability was found in Sudo in the per-command chroot feature. This flaw exists due to a boundary error when matching a sudoer rule that contains a per-command chroot directive CHROOT=dir. By sending a specially-crafted request, a local privileged attacker can elevate privileges...

AZL-13784 CVE-2023-27320 affecting package sudo for versions less than 1.9.13p3-1

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

DEBIAN-CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

UBUNTU-CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

Double free

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

PT-2023-1647 · Sudo +4 · Sudo +4

Name of the Vulnerable Software and Affected Versions: Sudo versions prior to 1.9.13p2 Description: The issue is related to a double free in the per-command chroot feature of the Sudo program. This can potentially allow an attacker to cause a denial of service. Recommendations: For versions prior...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

Oracle Linux 6 : sudo (ELSA-2023-12143)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12143 advisory. 1.8.6p3-29.0.4.el610.3 - Fixed Privilege escalation CVE-2023-22809 for sudoedit Orabug: 35037922 Tenable has extracted the preceding description block directly...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...