Red Hat Security Advisory

RHSA-2020:0726

sudo security update

Released 2020-03-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) sudo-1.8.6p3-29.el6_10.3
Red Hat Enterprise Linux Desktop Optional (v. 6) sudo-devel-1.8.6p3-29.el6_10.3
Red Hat Enterprise Linux HPC Node (v. 6) sudo-1.8.6p3-29.el6_10.3
Red Hat Enterprise Linux HPC Node Optional (v. 6) sudo-devel-1.8.6p3-29.el6_10.3
Red Hat Enterprise Linux Server (v. 6) sudo-1.8.6p3-29.el6_10.3
Red Hat Enterprise Linux Server Optional (v. 6) sudo-devel-1.8.6p3-29.el6_10.3, sudo-devel-1.8.6p3-29.el6_10.3.ppc
Red Hat Enterprise Linux Workstation (v. 6) sudo-1.8.6p3-29.el6_10.3
Red Hat Enterprise Linux Workstation Optional (v. 6) sudo-devel-1.8.6p3-29.el6_10.3

TI-2019-13477 CVE-2019-18634 · GHSA-rjv5-9w4p-4jrw

MEDIUM 52

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.19276 Published 2020-01-29 Fixed CWE-787