Settings

Theme

sudo buffer overflow in command line unescaping “Baron Samedit”

sudo.ws

12 points by willlll 5 years ago · 1 comment

Reader

Qub3d 5 years ago

Here's a summary of the issue as noted by Twitter user @IanColdwaller:

"Heap-based buffer overflow in sudo exploitable by any local user. Can be used to elevate privileges to root, even if user not listed in sudoers file. User auth is not required to exploit the bug"

At the very least, one must be logged in to a system to exploit it.

Given the modern paradigm of just setting up a hypervisor and giving everyone a virtual playground where they have complete root access, as opposed to a multi-user system, I don't expect this to be a terribly big issue.

I'll still be going through all the CentOS boxes at work tomorrow...

Keyboard Shortcuts

j
Next item
k
Previous item
o / Enter
Open selected item
?
Show this help
Esc
Close modal / clear selection