Red Hat Security AdvisoryRHSA-2023:0291
sudo security update
Released 2023-01-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) sudo-1.8.23-10.el7_9.3
- Red Hat Enterprise Linux Client Optional (v. 7) sudo-devel-1.8.23-10.el7_9.3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) sudo-devel-1.8.23-10.el7_9.3
- Red Hat Enterprise Linux Server (v. 7) sudo-1.8.23-10.el7_9.3
- Red Hat Enterprise Linux Server Optional (v. 7) sudo-devel-1.8.23-10.el7_9.3, sudo-devel-1.8.23-10.el7_9.3.ppc
- Red Hat Enterprise Linux Workstation (v. 7) sudo-1.8.23-10.el7_9.3
- Red Hat Enterprise Linux Workstation Optional (v. 7) sudo-devel-1.8.23-10.el7_9.3
Fixes 1 record
Priority HIGH 69
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.55367 · Published 2023-01-18 · Fixed CWE-269
