Out-of-bounds Write

Affecting sudo package, versions <1.8.19p1-2.1+deb9u2

Overview

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

References

• Apple Security Advisory
• Bugtraq Mailing List
• Bugtraq Mailing List
• Bugtraq Mailing List
• CONFIRM
• Debian Security Advisory
• Debian Security Announcement
• Debian Security Tracker
• FEDORA
• FEDORA
• GENTOO
• MISC
• MISC
• MISC
• Netapp Security Advisory
• OSS security Advisory
• OSS security Advisory
• OSS security Advisory
• OSS security Advisory
• REDHAT
• REDHAT
• RHSA Security Advisory
• RHSA Security Advisory
• SUSE
• Seclists Full Disclosure
• Ubuntu CVE Tracker
• Ubuntu Security Advisory
• Ubuntu Security Advisory