Lucene search
+L

1 matches found

OSV
OSV
•added 2023/01/24 7:58 a.m.•15 views

MGASA-2023-0025 Updated sudo packages fix security vulnerability

In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user-provided environment variables SUDOEDITOR, VISUAL, and EDITOR, allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected...

7.8CVSS7.4AI score0.55367EPSS
SaveExploits21References6
Rows per page
Query Builder