CVE-2014-9680

概要

参考情報

• openwall.com/lists/oss-security/2014/10/15/24 · Exploit
• rhn.redhat.com/errata/RHSA-2015-1409.html
• securitytracker.com/id/1033158
• sudo.ws/alerts/tz.html · Vendor Advisory
• security.gentoo.org/glsa/201504-02

sudo のその他の脆弱性

• CVE-2026-35535高 7.8In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer…
• CVE-2025-32463高 7.8悪用確認済み（CISA KEV）Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the -…
• CVE-2025-32462高 8.8Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to e…
• CVE-2023-7090高 8.8A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore,…
• CVE-2023-42465高 7.0Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is…