High ELSA-2023-12143 1 CVE

Important: sudo security update (Oracle Linux 8)

Published Feb 28, 2023 · Updated Feb 28, 2023

Ecosystem: Oracle Linux

Summary

[1.8.6p3-29.0.4.el6_10.3]
- Fixed Privilege escalation CVE-2023-22809 for sudoedit [Orabug: 35037922]

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 8	sudo	0:1.8.6p3-29.0.4.el6_10.3
Oracle Linux · 8	sudo-devel	0:1.8.6p3-29.0.4.el6_10.3

Vulnerabilities 1

High 7.8

CVE-2023-22809 Public exploit EPSS 55%

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environme…

sudo sudo sudo sudo Debian Ubuntu Azure Linux Alpine

Jan 18, 2023