Red Hat Security AdvisoryRHSA-2024:0811
sudo security update
Released 2024-02-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) sudo-python-plugin-1.9.5p2-10.el9_3
- Red Hat Enterprise Linux AppStream EUS (v.9.0) sudo-python-plugin-1.9.5p2-7.el9_0.4
- Red Hat Enterprise Linux AppStream EUS (v.9.2) sudo-python-plugin-1.9.5p2-9.el9_2.2
- Red Hat Enterprise Linux BaseOS (v. 8) sudo-1.9.5p2-1.el8_9
- Red Hat Enterprise Linux BaseOS (v. 9) sudo-1.9.5p2-10.el9_3
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) sudo-1.9.5p2-1.el8_6
- Red Hat Enterprise Linux BaseOS EUS (v.8.8) sudo-1.9.5p2-1.el8_8
- Red Hat Enterprise Linux BaseOS EUS (v.9.0) sudo-1.9.5p2-7.el9_0.4
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) sudo-1.9.5p2-9.el9_2.2
Fixes 3 records
Priority LOW 32
Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00545 · Published 2023-12-22 · Partial fix
Priority LOW 26
Sudo before 1.9.13 does not escape control characters in sudoreplay output.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00953 · Published 2023-03-16 · Partial fix CWE-116
Priority LOW 26
Sudo before 1.9.13 does not escape control characters in log messages.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00915 · Published 2023-03-16 · Partial fix CWE-116
