Red Hat Security Advisory

RHSA-2020:0509

sudo security update

Released 2020-02-14 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2019-13477 CVE-2019-18634 · GHSA-rjv5-9w4p-4jrw

MEDIUM 52

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.19276 Published 2020-01-29 Fixed CWE-787