Vulnerability in sudo - security update
Summary
DLA-1011-1: sudo - security update. Affects sudo versions < 1.8.5p2-1+nmu3+deb7u4. Fixed in 1.8.5p2-1+nmu3+deb7u4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is a widely used command-line utility that allows users to run programs with the security privileges of another user, typically the superuser. It is commonly found in Unix-like operating systems, including Debian 7 (Wheezy). The vulnerability in sudo version 1.8.20p1 and earlier allows for input validation bypass in the get_process_ttyname() function, leading to information disclosure and potential command execution.
Vulnerability Detail
The vulnerability arises from a lack of proper input validation in the get_process_ttyname() function of sudo. This allows an attacker to inject newlines into the input, bypassing security checks and potentially executing arbitrary commands. The impact of this vulnerability includes unauthorized access to sensitive information and the ability to execute commands with elevated privileges.
How To Fix
Minimum fixed version
1.8.5p2-1+nmu3+deb7u4
This is the first release that contains the fix.
sudo apt-get install --only-upgrade sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The recommended solution is to upgrade the sudo package to the fixed version.
Conclusion
The vulnerability in sudo version 1.8.20p1 and earlier allows for input validation bypass, leading to information disclosure and potential command execution. It is recommended to upgrade the sudo package to version 1.8.5p2-1+nmu3+deb7u4 or later to mitigate this vulnerability. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for sudo →
FAQ
Sudo is a command-line utility that allows users to run programs with the security privileges of another user, typically the superuser.
The vulnerability allows for information disclosure and potential command execution, which can lead to unauthorized access to sensitive data and the ability to execute commands with elevated privileges.
The vulnerability affects sudo version 1.8.20p1 and earlier.
To fix this vulnerability, upgrade the sudo package to version 1.8.5p2-1+nmu3+deb7u4 or later using the package manager of the Debian 7 (Wheezy) system.
For more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, refer to the Debian LTS documentation.
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
