Information Disclosure

🗓️ 12 Jan 2021 21:16:53Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

sudo vulnerability in sudoedit allows local information disclosur

Reporter	Title	Published	Views	Family All 122
FreeBSD	sudo -- Potential information leak in sudoedit	11 Jan 202100:00	–	freebsd
Tenable Nessus	Alibaba Cloud Linux 3 : 0113: sudo (ALINUX3-SA-2022:0113)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : sudo (ALSA-2021:1723)	9 Feb 202200:00	–	nessus
Tenable Nessus	CentOS 8 : sudo (CESA-2021:1723)	19 May 202100:00	–	nessus
Tenable Nessus	Debian dla-3181 : sudo - security update	7 Nov 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : sudo (EulerOS-SA-2021-1173)	1 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : sudo (EulerOS-SA-2021-1257)	5 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : sudo (EulerOS-SA-2021-1276)	5 Feb 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : sudo (EulerOS-SA-2021-1390)	10 Mar 202100:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.2.6 : sudo (EulerOS-SA-2021-1424)	10 Mar 202100:00	–	nessus

Vulners

Node

sudo sudoMatch1.9.3p1-1debian

AND

debian debian_linuxMatch999

OR

sudo sudoMatch1.9.3p1-1debian

AND

debian debian_linuxMatch11

OR

sudo sudoMatch1.9.0-r0os

AND

alpinelinux alpine_linuxMatch3.12

OR

apache groovyMatch1.9.1-1ubuntu1debian

AND

debian debian_linux

OR

xenial xenialMatch1.8.16-0ubuntu1debian

AND

xenial xenialMatch1.8.16-0ubuntu1.9debian

AND

debian debian_linux

OR

google bionicMatch1.8.21p2-3ubuntu1debian

AND

google bionicMatch1.8.21p2-3ubuntu1.3debian

AND

google bionicMatch1.8.21p2-3ubuntu1.2debian

AND

debian debian_linux

OR

focal focalMatch1.8.31-1ubuntu1debian

AND

focal focalMatch1.8.31-1ubuntu1.1debian

AND

debian debian_linux

OR

devel develMatch1.9.3p1-1ubuntu1debian

AND

devel develMatch1.9.1-1ubuntu1debian

AND

debian debian_linux

OR

sudo sudoMatch1.8.31p1-r1os

AND

sudo sudoMatch1.9.0-r0os

AND

sudo sudoMatch1.9.5p2-r0os

AND

sudo sudoMatch1.8.31p1-r0os

AND

sudo sudoMatch1.8.31-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

sudo sudoMatch1.8.27-r2os

AND

alpinelinux alpine_linuxMatch3.10

OR

sudo sudoMatch1.8.31-r1os

AND

sudo sudoMatch1.8.31-r0os

AND

alpinelinux alpine_linuxMatch3.11

OR

hirsute hirsuteMatch1.9.3p1-1ubuntu1debian

AND

debian debian_linux

OR

sudo sudoMatch1.8.27-1+deb10u3debian

AND

sudo sudoMatch1.8.27-1+deb10u2debian

AND

debian debian_linuxMatch10

OR

sudo sudoMatch1.8.25p1_8.el8_1

OR

sudo sudoMatch1.8.29_6.el8

OR

sudo sudoMatch1.8.25p1_7.el8

OR

sudo sudoMatch1.8.25p1_4.el8

OR

sudo sudoMatch1.8.29_6.el8_3.1

OR

sudo sudoMatch1.8.25p1_8.el8_1.1

OR

sudo sudoMatch1.8.29_5.el8

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2022/11/msg00007.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-23239
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/
security	www.security.gentoo.org/glsa/202101-33
bugzilla	www.bugzilla.suse.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20210129-0010/
sudo	www.sudo.ws/stable.html

07 Nov 2023 23:13Current

3.6Low risk

Vulners AI Score3.6

CVSS 21.9

CVSS 3.12.5

EPSS0.00094

sudo vulnerability information disclosure sudoedit