Multiple vulnerabilities have been discovered in sudo, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.9.17_p1 | >= 1.9.17_p1 |
sudo allows a system administrator to give users the ability to run commands as other users.
Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details.
An attacker can escalate privileges to root by providing a special argument to sudo's --chroot (which is used for chroot purposes). Please review the referenced CVE identifier for details.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.9.17_p1"
A vulnerability has been discovered in sudo which can lead to execution manipulation through rowhammer-style memory manipulation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.9.15_p2 | >= 1.9.15_p2 |
sudo allows a system administrator to give users the ability to run commands as other users.
Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details.
Stack/register variables can be flipped via fault injection, affecting execution flow in security-sensitive code.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.9.15_p2"
Multiple vulnerabilities have been found in sudo, the worst of which can result in root privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.9.13_p2 | >= 1.9.13_p2 |
sudo allows a system administrator to give users the ability to run commands as other users.
Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.9.13_p2"
A vulnerability has been discovered in sudo which could result in root privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.9.12_p2 | >= 1.9.12_p2 |
sudo allows a system administrator to give users the ability to run commands as other users.
The sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process.
The improper processing of user's environment variables could lead to the editing of arbitrary files as root, potentially leading to root privilege escalation.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.9.12_p2"
A vulnerability has been discovered in sudo which could result in denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.9.12-r1 | >= 1.9.12-r1 |
sudo allows a system administrator to give users the ability to run commands as other users.
In certain password input handling, sudo incorrectly assumes the password input is at least nine bytes in size, leading to a heap buffer overread.
In the worst case, the heap buffer overread can result in the denial of service of the sudo process.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.9.12-r1"
Multiple vulnerabilities have been found in sudo, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.9.5_p2 | >= 1.9.5_p2 |
sudo (su “do”) allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments.
Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details.
Local users are able to gain unauthorized privileges on the system or determine the existence of files.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.9.5_p2"
Multiple vulnerabilities have been found in sudo, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.31 | >= 1.8.31 |
sudo (su “do”) allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments.
Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below for details.
A local attacker could expose or corrupt memory information, inject code to be run as a root user or cause a Denial of Service condition.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.31"
A vulnerability in sudo allows local users to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.20_p2 | >= 1.8.20_p2 |
sudo (su “do”) allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments.
The fix present in app-admin/sudo-1.8.20_p1 (GLSA 201705-15) was incomplete as it did not address the problem of a command with a newline in the name.
A local attacker could execute arbitrary code with root privileges.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.20_p2"
A vulnerability in sudo allows local users to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.20_p1 | >= 1.8.20_p1 |
sudo (su “do”) allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments.
Qualys discovered a vulnerability in sudo’s get_process_ttyname() for Linux, that via sudo_ttyname_scan() can be directed to use a user-controlled, arbitrary tty device during its traversal of “/dev” by utilizing the world-writable /dev/shm.
For further information, please see the Qualys Security Advisory
A local attacker can pretend that his tty is any character device on the filesystem, and after two race conditions, an attacker can pretend that the controlled tty is any file on the filesystem allowing for privilege escalation
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.20_p1"
sudo is vulnerable to an escalation of privileges via a symlink attack.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.15-r1 | >= 1.8.15-r1 |
sudo (su “do”) allows a system administrator to delegate authority to give certain users (or groups of users) the ability to run some (or all) commands as root or another user while providing an audit trail of the commands and their arguments.
sudoedit in sudo is vulnerable to the escalation of privileges by local users via a symlink attack. This can be exploited by a file whose full path is defined using multiple wildcards in “/etc/sudoers”, as demonstrated by “/home/*/*/file.txt”.
Local users are able to gain unauthorized privileges on the system.
There is no known work around at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.15-r1"
A vulnerability in sudo could allow a local attacker to read arbitrary files or bypass security restrictions.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.12 | >= 1.8.12 |
sudo allows a system administrator to give users the ability to run commands as other users. Access to commands may also be granted on a range to hosts.
sudo does not handle the TZ environment variable properly.
A local attacker may be able to read arbitrary files or information from device special files.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.12"
A vulnerability has been found in sudo allowing a local attacker to gain elevated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.5 | >= 1.8.5, < 1.6.9 |
sudo allows a system administrator to give users the ability to run commands as other users. Access to commands may also be granted on a range to hosts.
When the Sudo env_reset option is disabled (it is enabled by default), certain environment variables are not blacklisted as expected.
A local attacker, authorized to run commands using sudo, can use this flaw to execute arbitrary code or escalate his privileges.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.5"
Multiple vulnerabilities have been found in sudo which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.6_p7 | >= 1.8.6_p7 |
sudo allows a system administrator to give users the ability to run commands as other users. Access to commands may also be granted on a range to hosts.
Multiple vulnerabilities have been found in sudo:
A local attacker with sudo privileges could connect to the stdin, stdout, and stderr of the terminal of a user who has authenticated with sudo, allowing the attacker to hijack the authorization of the other user. Additionally, a local or physically proximate attacker could set the system clock to the epoch, bypassing time restrictions on sudo authentication.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.6_p7"
A vulnerability has been found in sudo which may allow local users to gain escalated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.5_p1 | >= 1.8.5_p1 |
sudo allows a system administrator to give users the ability to run commands as other users. Access to commands may also be granted on a range to hosts.
An error in sudo may allow unintended IPv4 hosts to be granted access to commands.
A local attacker could gain escalated privileges.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.5_p1"
Two vulnerabilities have been discovered in sudo, allowing local attackers to possibly gain escalated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.8.3_p2 | >= 1.8.3_p2, >= 1.7.4_p5 (revision) |
sudo allows a system administrator to give users the ability to run commands as other users.
Two vulnerabilities have been discovered in sudo:
A local attacker could possibly gain the ability to run arbitrary commands with the privileges of other users or groups, including root.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.3_p2"
The secure path feature and group handling in sudo allow local attackers to escalate privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.7.4_p3-r1 | >= 1.7.4_p3-r1 |
sudo allows a system administrator to give users the ability to run commands as other users.
Multiple vulnerabilities have been reported in sudo:
A local attacker could exploit these vulnerabilities to gain the ability to run certain commands with the privileges of other users, including root, depending on the configuration.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.7.4_p3-r1"
A flaw in sudo's -e option may allow local attackers to execute arbitrary commands.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.7.2_p6 | >= 1.7.2_p6 |
sudo allows a system administrator to give users the ability to run commands as other users.
The command matching functionality does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".".
A local attacker with the permission to run sudoedit could, under certain circumstances, execute arbitrary commands as whichever user he has permission to run sudoedit as, typically root.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.7.2_p6"
Two vulnerabilities in sudo might allow local users to escalate privileges and execute arbitrary code with root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.7.2_p4 | >= 1.7.2_p4 |
sudo allows a system administrator to give users the ability to run commands as other users.
Multiple vulnerabilities have been discovered in sudo:
A local attacker with privileges to use "sudoedit" or the privilege to execute commands with the "runas_default" setting enabled could leverage these vulnerabilities to execute arbitrary code with elevated privileges.
CVE-2010-0426: Revoke all "sudoedit" privileges, or use the full path to sudoedit. CVE-2010-0427: Remove all occurrences of the "runas_default" setting.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.7.2_p4"
A vulnerability in sudo may allow for privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.7.0 | >= 1.7.0 |
sudo allows a system administrator to give users the ability to run commands as other users.
Harald Koenig discovered that sudo incorrectly handles group specifications in Runas_Alias (and related) entries when a group is specified in the list (using %group syntax, to allow a user to run commands as any member of that group) and the user is already a member of that group.
A local attacker could possibly run commands as an arbitrary system user (including root).
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.7.0"
A vulnerability in sudo may allow local users to elevate privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-admin/sudo | * | < 1.6.8_p9 | >= 1.6.8_p9 |
sudo allows a system administrator to give users the ability to run commands as other users.
The sudoers file is used to define the actions sudo users are permitted to perform. Charles Morris discovered that a specific layout of the sudoers file could cause the results of an internal check to be clobbered, leaving sudo vulnerable to a race condition.
Successful exploitation would permit a local sudo user to execute arbitrary commands as another user.
Reorder the sudoers file using the visudo utility to ensure the 'ALL' pseudo-command precedes other command definitions.
All sudo users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-admin/sudo-1.6.8_p9"