Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:0406-1

Опубликовано: 19 фев. 2020
Источник: suse-cvrf

Описание

Security update for sudo

This update for sudo fixes the following issues:

Security issue fixed:

  • CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202).

Non-security issue fixed:

  • Fixed an issue where sudo -l would ask for a password even though listpw was set to never (bsc#1162675).

Список пакетов

HPE Helion OpenStack 8
sudo-1.8.20p2-3.17.1
SUSE Enterprise Storage 5
sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Desktop 12 SP4
sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Server 12 SP3-BCL
sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Server 12 SP3-LTSS
sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Server 12 SP4
sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Software Development Kit 12 SP4
sudo-devel-1.8.20p2-3.17.1
SUSE OpenStack Cloud 8
sudo-1.8.20p2-3.17.1
SUSE OpenStack Cloud Crowbar 8
sudo-1.8.20p2-3.17.1

Ссылки

Описание

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Затронутые продукты
HPE Helion OpenStack 8:sudo-1.8.20p2-3.17.1
SUSE Enterprise Storage 5:sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Desktop 12 SP4:sudo-1.8.20p2-3.17.1
SUSE Linux Enterprise Server 12 SP3-BCL:sudo-1.8.20p2-3.17.1
Ссылки
Уязвимость SUSE-SU-2020:0406-1