Vulnerability in sudo - security update
Summary
DLA-970-1: sudo - security update. Affects sudo versions < 1.8.5p2-1+nmu3+deb7u3. Fixed in 1.8.5p2-1+nmu3+deb7u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The sudo package is designed to provide limited superuser privileges to specific users. It allows users to execute commands as the superuser or another user, as specified in the sudoers file. This package is commonly used in Linux distributions to enhance security by restricting the execution of privileged commands. However, a vulnerability has been discovered in sudo that could allow a sudoers user to obtain full root privileges on an SELinux-enabled system.
Vulnerability Detail
The vulnerability in sudo arises from improper parsing of the "/proc/[pid]/stat" file to read the device number of the tty from field 7 (tty_nr). By exploiting this flaw, a sudoers user can escalate their privileges and gain full root access. This vulnerability poses a significant risk on SELinux-enabled systems, as it allows an attacker with sudo access to bypass restrictions and execute arbitrary commands with root privileges.
How To Fix
Minimum fixed version
1.8.5p2-1+nmu3+deb7u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update as soon as possible to mitigate the risk of privilege escalation.
Conclusion
The vulnerability in sudo poses a significant risk to systems running SELinux. It allows a sudoers user to escalate their privileges and gain full root access. To mitigate this risk, it is crucial to upgrade the sudo package to the fixed versions specified in the advisory. Failure to apply the security update promptly may result in unauthorized access, data breaches, and system compromise. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for sudo →
FAQ
Sudo is a program that allows users to execute commands with the privileges of another user, typically the superuser. It is commonly used to provide limited superuser access to specific users.
On SELinux-enabled systems, this vulnerability allows a sudoers user to bypass restrictions imposed by SELinux and gain full root privileges. This can lead to unauthorized access, data breaches, and system compromise.
While the details of any known exploits are not provided in the vulnerability report, it is crucial to apply the security update promptly to prevent potential exploitation.
The vulnerability affects specific versions of the sudo package. For Debian 7 Wheezy, versions prior to 1.8.5p2-1+nmu3+deb7u3 are vulnerable. For Debian 8 Jessie, versions prior to 1.8.10p3-1+deb8u4 are vulnerable.
You can find further information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian LTS wiki: https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
