WS-2021-0493

In Sudo, versions SUDO1820p1 through SUDO195 are vulnerable to out-of-bounds read, due to the time zone variable not properly validated when parsed...

sudo: unsafe handling of TZ environment variable

It was discovered that sudo did not perform any checks of the TZ environment variable value. If sudo was configured to preserve the TZ environment variable, a local user with privileges to execute commands via sudo could possibly use this flaw to achieve system state changes not permitted by the...