CVE-2023-27320

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2023/03/01/8 · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/332KN4QI6QXB7NI7SWSJ2EQJKWIILFN6
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLXMRAMXC3BYL4DNKVTK3V6JDMUXZ7B
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6VW24YGXJYI4NZ5HZPQCF4MCE7766AU
• security.gentoo.org/glsa/202309-12 · Third Party Advisory
• security.netapp.com/advisory/ntap-20230413-0009 · Third Party Advisory
• openwall.com/lists/oss-security/2023/02/28/1 · Exploit
• sudo.ws/releases/stable · Release Notes

Lỗ hổng khác của sudo

• CVE-2026-35535CAO 7.8In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer…
• CVE-2025-32463CAO 7.8ĐANG BỊ KHAI THÁC (CISA KEV)Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the -…
• CVE-2025-32462CAO 8.8Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to e…
• CVE-2023-7090CAO 8.8A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore,…
• CVE-2023-42465CAO 7.0Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is…