Summary
It was discovered that Sudo incorrectly handled the per-command chroot
feature. In certain environments where Sudo is configured with a rule that
contains a CHROOT setting, a local attacker could use this issue to cause
Sudo to crash, resulting in a denial of service, or possibly escalate
privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | sudo | 1.9.9-1ubuntu2.3 |
Vulnerabilities 1
-
High 7.2
Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
References
-
report
https://ubuntu.com/security/CVE-2023-27320