Описание
Security update for sudo
This update for sudo fixes the following issues:
- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
Список пакетов
SUSE Linux Enterprise Server 12 SP2-BCL
sudo-1.8.10p3-10.35.1
Ссылки
- Link for SUSE-SU-2021:1267-1
- E-Mail link for SUSE-SU-2021:1267-1
- SUSE Security Ratings
- SUSE Bug 1183936
- SUSE CVE CVE-2021-3156 page
Описание
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-BCL:sudo-1.8.10p3-10.35.1
Ссылки
- CVE-2021-3156
- SUSE Bug 1180684
- SUSE Bug 1181090
- SUSE Bug 1181506
- SUSE Bug 1181657
- SUSE Bug 1183936
- SUSE Bug 1218863
- SUSE Bug 1225623