Red Hat Security AdvisoryRHSA-2021:0223
sudo security update
Released 2021-01-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) sudo-1.8.23-3.el7_6.2
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) sudo-devel-1.8.23-3.el7_6.2
- Red Hat Enterprise Linux Server EUS (v. 7.6) sudo-1.8.23-3.el7_6.2
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) sudo-devel-1.8.23-3.el7_6.2, sudo-devel-1.8.23-3.el7_6.2.ppc
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) sudo-1.8.23-3.el7_6.2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) sudo-devel-1.8.23-3.el7_6.2
Fixes 1 record
Priority CRITICAL 93KEV
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.99962 · Published 2021-01-26 · Fixed CWE-193
