USN-3968-1: Sudo vulnerabilities

🗓️ 06 May 2019 17:19:43Reported by UbuntuType

ubuntu🔗 ubuntu.com👁 115 Views

Sudo vulnerabilities in Ubuntu 16.04 ESM expose system to arbitrary command execution and file overwrit

Reporter	Title	Published	Views	Family All 172
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in sudo, glibc affect IBM SmartCloud Entry (CVE-2017-1000368 CVE-2017-1000366)	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in sudo affect PowerKVM	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in sudo affects PowerKVM	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known vulnerabilities (multiple CVEs)	16 Jun 201822:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in expat, nss, bind , policycoreutils, sudo shipped with SmartCloud Entry Appliance	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in sudo.	31 Jan 201902:25	–	ibm
FreeBSD	sudo -- Potential bypass of sudo_noexec.so via wordexp()	28 Oct 201600:00	–	freebsd
Tenable Nessus	Amazon Linux 2 : sudo (ALAS-2019-1315)	15 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : sudo (ALAS-2017-780)	5 Jan 201700:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	16.04	any	sudo	1.8.16-0ubuntu1.6	sudo_1.8.16-0ubuntu1.6_any.deb

06 May 2019 17:19Current

7High risk

Vulners AI Score7

CVSS 27.2

CVSS 36.4 - 8.2

EPSS0.00573