5623 matches found
OESA-2023-1166 systemd security update
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fixes: systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed...
CVE-2023-28487
A flaw was found in the sudo package, shipped with Red Hat Enterprise Linux 8 and 9, where the "sudoreplay -l' command improperly escapes terminal control characters. As sudo's log messages may contain user-controlled strings, this could allow an attacker to inject terminal control commands,...
CVE-2023-28486
A flaw was found in the sudo package, shipped with Red Hat Enterprise Linux 8 and 9, where sudo improperly escapes terminal control characters during logging operations. As sudo's log messages may contain user-controlled strings, this may allow an attacker to inject terminal control commands,...
SUSE CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
SUSE CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
DEBIAN-CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
DEBIAN-CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
Code injection
Sudo before 1.9.13 does not escape control characters in log messages...
CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
UBUNTU-CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages...
UBUNTU-CVE-2023-28487
Sudo before 1.9.13 does not escape control characters in sudoreplay output...
Code injection
Sudo before 1.9.13 does not escape control characters in sudoreplay output...