4835 matches found
FreeBSD : sudo -- Multiple vulnerabilities (f3cf4b33-6013-11eb-9a0e-206a8a720317)
Todd C. Miller reports : When invoked as sudoedit, the same set of command line options are now accepted as for sudo -e. The -H and -P options are now rejected for sudoedit and sudo -e which matches the sudo 1.7 behavior. This is part of the fix for CVE-2021-3156. Fixed a potential buffer overflo...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Sudo vulnerabilities (USN-4705-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4705-1 advisory. It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue...
Ubuntu: Security Advisory (USN-4705-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for sudo (FEDORA-2021-2cb63d912a)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security fix for the ALT Linux 8 package sudo version 1:1.9.5p2-alt1
Jan. 27, 2021 Evgeny Sinelnikov 1:1.9.5p2-alt1 - Update to latest security release fixes: CVE-2021-3156 closes: 39615 - Added sudo-python package with Sudo Python Plugin API - Added sudo-logsrvd package with High-performance log server...
Security update for sudo (important)
openSUSE Security Update: Security update for sudo Announcement ID: openSUSE-SU-2021:0170-1 Rating: important References: 1180684 1180685 1180687 1181090 Cross-References: CVE-2021-23239 CVE-2021-23240 CVE-2021-3156 Affected Products: openSUSE Leap 15.2 An update that solves three vulnerabilities...
RHEL 7 : sudo (RHSA-2021:0223)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0223 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
Oracle Linux 7 : sudo (ELSA-2021-0221)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0221 advisory. 1.8.23-10.1 - RHEL 7.9.Z ERRATUM - CVE-2021-3156 Resolves: rhbz1917729 Tenable has extracted the preceding description block directly from the Oracle Linux...
RHEL 7 : sudo (RHSA-2021:0221)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0221 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
Debian DLA-2534-1 : sudo security update
The Qualys Research Labs discovered a heap-based buffer overflow vulnerability in sudo, a program designed to provide limited super user privileges to specific users. Any local user sudoers and non-sudoers can exploit this flaw for root privilege escalation. For Debian 9 stretch, this problem has...
RHEL 8 : sudo (RHSA-2021:0218)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:0218 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
Oracle Linux 6 : sudo (ELSA-2021-9019)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-9019 advisory. - Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via sudoedit -s and a command-line argument that ends with a singl...
Slackware 14.0 / 14.1 / 14.2 / current : sudo (SSA:2021-026-01)
New sudo packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-026-01. The text itself is copyrigh...
Sudo Buffer Overflow Vulnerability
Sudo is a program used on Unix-like systems that allows the user to execute commands in a secure way with special privileges. Sudo suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to gain root privileges on the system...
sudo security update
1.8.23-10.1 - RHEL 7.9.Z ERRATUM - CVE-2021-3156 Resolves: rhbz1917729...
Important Photon OS Security Update - PHSA-2021-0188
Updates of 'sudo' packages of Photon OS have been released...
Sudo version 1.8.2 to 1.8.31p2 Heap-Based Buffer Overflow Vulnerability
Qualys has released extensive research details regarding a heap-based buffer overflow vulnerability in sudo. The issue was introduced in July 2011 commit 8255ed69, and affects all legacy versions from 1.8.2 to 1.8.31p2 and all stable versions from 1.9.0 to 1.9.5p1, in their default configuration...
Sudo Heap-Based Buffer Overflow
Qualys Security Advisory Baron Samedit: Heap-based buffer overflow in Sudo CVE-2021-3156 ======================================================================== Contents ======================================================================== Summary Analysis Exploitation Acknowledgments Timelin...
GLSA-202101-33 : sudo: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202101-33 sudo: Multiple vulnerabilities Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details. Impact : Local users are able to gain unauthorized privileges on the...