Количество 4
Количество 4
CVE-2026-82457
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target programs with root privileges instead of intended unprivileged accounts.
CVE-2026-82457
su-exec through 0.3 fails to validate numeric user and group identifie ...
GHSA-qpg9-jg2w-m84x
su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target programs with root privileges instead of intended unprivileged accounts.
BDU:2026-13269
Уязвимость функции strtol() утилиты su-exec, позволяющая нарушителю повысить свои привилегии до уровня root и выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-82457 su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target programs with root privileges instead of intended unprivileged accounts. | CVSS3: 7.8 | 0% Низкий | 22 дня назад |
| CVE-2026-82457 su-exec through 0.3 fails to validate numeric user and group identifie ... | CVSS3: 7.8 | 0% Низкий | 22 дня назад |
| GHSA-qpg9-jg2w-m84x su-exec through 0.3 fails to validate numeric user and group identifiers parsed with strtol before assigning to uid_t and gid_t, allowing truncation of out-of-range values to zero. Attackers can supply large numeric identifiers that truncate to root's identifier, causing su-exec to execute target programs with root privileges instead of intended unprivileged accounts. | CVSS3: 7.8 | 0% Низкий | 22 дня назад |
 | BDU:2026-13269 Уязвимость функции strtol() утилиты su-exec, позволяющая нарушителю повысить свои привилегии до уровня root и выполнить произвольный код | CVSS3: 7.8 | 0% Низкий | 23 дня назад |
Уязвимостей на страницу