Lucene search
+L

1 matches found

OSV
OSV
added 2023/01/24 7:58 a.m.9 views

MGASA-2023-0025 Updated sudo packages fix security vulnerability

In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user-provided environment variables SUDOEDITOR, VISUAL, and EDITOR, allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected...

7.8CVSS7.6AI score0.55367EPSS
SaveExploits20References6
Rows per page
Query Builder