Ubuntu 22.04 LTS : Sudo vulnerability (USN-5908-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5908-1 advisory. It was discovered that Sudo incorrectly handled the per-command chroot feature. In certain environments where Sudo is configured with a rule that contains a CHROO...

CVE-2023-27320

A double-free vulnerability was found in Sudo in the per-command chroot feature. This flaw exists due to a boundary error when matching a sudoer rule that contains a per-command chroot directive CHROOT=dir. By sending a specially-crafted request, a local privileged attacker can elevate privileges...

AZL-13784 CVE-2023-27320 affecting package sudo for versions less than 1.9.13p3-1

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

DEBIAN-CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

UBUNTU-CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

Double free

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

PT-2023-1647 · Sudo +4 · Sudo +4

Name of the Vulnerable Software and Affected Versions: Sudo versions prior to 1.9.13p2 Description: The issue is related to a double free in the per-command chroot feature of the Sudo program. This can potentially allow an attacker to cause a denial of service. Recommendations: For versions prior...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

Oracle Linux 6 : sudo (ELSA-2023-12143)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12143 advisory. 1.8.6p3-29.0.4.el610.3 - Fixed Privilege escalation CVE-2023-22809 for sudoedit Orabug: 35037922 Tenable has extracted the preceding description block directly...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

sudo security update

1.8.6p3-29.0.4.el610.3 - Fixed Privilege escalation CVE-2023-22809 for sudoedit Orabug: 35037922...

CVE-2023-27320

CVE-2023-27320 affects sudo and is caused by a double-free in the per-command chroot feature. Public advisories indicate affected versions include sudo before 1.9.13p2 (and related subversions such as 1.9.12p2‑1 in some advisories) with fixes in newer releases. Affected platforms include Linux di...

Sudo 资源管理错误漏洞

Sudo is a program used on Unix-like systems that allows users to execute commands with special privileges in a secure manner. A security vulnerability exists in versions prior to Sudo 1.9.13p2, which stems from the presence of a double release vulnerability...

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature...

CVE-2023-22809 affecting package sudo for versions less than 1.9.12p2-1

CVE-2023-22809 affecting package sudo for versions less than 1.9.12p2-1. An upgraded version of the package is available that resolves this issue...

PT-2023-35540 · Sudo · Sudo

Name of the Vulnerable Software and Affected Versions: sudo affected versions not specified Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves functions such as sudo lbuf append quoted v1 and sudoers format member int. Recommendations: At the moment, ther...