CVE-2019-18634

Опубликовано: 29 янв. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Высокий

Описание

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00029.html
http://packetstormsecurity.com/files/156174/Slackware-Security-Advisory-sudo-Updates.html
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156189/Sudo-1.8.25p-Buffer-Overflow.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Jan/40
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/01/30/6
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/01/31/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/05/2
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/05/5
Exploit
Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0487
https://access.redhat.com/errata/RHSA-2020:0509
https://access.redhat.com/errata/RHSA-2020:0540
https://access.redhat.com/errata/RHSA-2020:0726
https://lists.debian.org/debian-lts-announce/2020/02/msg00002.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/
https://seclists.org/bugtraq/2020/Feb/2
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2020/Feb/3
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2020/Jan/44
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202003-12
https://security.netapp.com/advisory/ntap-20200210-0001/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*

Версия от 1.7.1 (включая) до 1.8.26 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.86816

Высокий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2019-18634

CVSS3: 7.8

ubuntu

около 6 лет назад

CVE-2019-18634

CVSS3: 7.8

redhat

около 6 лет назад

CVE-2019-18634

CVSS3: 7.8

debian

около 6 лет назад

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users ...

openSUSE-SU-2020:0244-1

suse-cvrf

почти 6 лет назад

Security update for sudo

SUSE-SU-2020:0409-1

suse-cvrf

почти 6 лет назад

Security update for sudo

EPSS

Процентиль: 99%

0.86816

Высокий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787