Red Hat Security AdvisoryRHSA-2020:0540
sudo security update
Released 2020-02-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) sudo-1.8.23-4.el7_7.2
- Red Hat Enterprise Linux Client Optional (v. 7) sudo-devel-1.8.23-4.el7_7.2
- Red Hat Enterprise Linux ComputeNode (v. 7) sudo-1.8.23-4.el7_7.2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) sudo-devel-1.8.23-4.el7_7.2
- Red Hat Enterprise Linux Server (v. 7) sudo-1.8.23-4.el7_7.2
- Red Hat Enterprise Linux Server Optional (v. 7) sudo-devel-1.8.23-4.el7_7.2, sudo-devel-1.8.23-4.el7_7.2.ppc
- Red Hat Enterprise Linux Workstation (v. 7) sudo-1.8.23-4.el7_7.2
- Red Hat Enterprise Linux Workstation Optional (v. 7) sudo-devel-1.8.23-4.el7_7.2
Fixes 1 record
Priority MEDIUM 52
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.19276 · Published 2020-01-29 · Fixed CWE-787
