Excessive privileges In sudo
Description
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 11 | 1.9.5p2-3+deb11u2 | ||
debian 12 | 1.9.13p3-1+deb12u2 | ||
debian 13 | 1.9.16p2-3 | ||
debian 14 | 1.9.16p2-3 | ||
 rpm rhel9 | 0:1.9.5p2-10.el9_6.1 | ||
rpm rhel10 | 0:1.9.15-8.p5.el10_0.2 | ||
rpm rhel7 | - | - | |
rpm rhel8 | 0:1.9.5p2-1.el8_10.1 | ||
rpm rhel8.4 | 0:1.8.29-7.el8_4.3 | ||
rpm rhel9.4 | 0:1.9.5p2-10.el9_4.1 |
Aliases
1. 2. 3. 4. 5.
References
1.