CVE-2015-8239
The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.
- Score
- CVSS 3.0 7.0 High
- Status
- Modified - cve@mitre.org
- Published
- 2017-10-10
- Last modified
- 2024-08-06
- Weaknesses
- CWE-362
Affected products
References
- http://www.openwall.com/lists/oss-security/2015/11/18/22
- https://bugzilla.redhat.com/show_bug.cgi?id=1283635
- https://www.sudo.ws/repos/sudo/rev/0cd3cc8fa195
- https://www.sudo.ws/repos/sudo/rev/24a3d9215c64
- https://www.sudo.ws/repos/sudo/rev/397722cdd7ec
