Summary
Joe Vennix discovered that Sudo incorrectly handled memory operations when
the pwfeedback option is enabled. A local attacker could possibly use this
issue to obtain unintended access to the administrator account.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | sudo | 1.8.16-0ubuntu1.9 |
| Ubuntu · 18.04 LTS 18.04:LTS | sudo | 1.8.21p2-3ubuntu1.2 |
Vulnerabilities 1
-
Unscored —
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the…
References
-
report
https://ubuntu.com/security/CVE-2019-18634