Lucene search
F5F5:K91327225HistoryFeb 24, 2020 - 12:00 a.m.
K91327225 : Linux sudo process vulnerability CVE-2019-18634
2020-02-2400:00:00
my.f5.com
24
Security Advisory Description
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c. (CVE-2019-18634)
Impact
An attacker can trigger a stack-based buffer overflow in the privileged sudo process.
Related
slackware
slackware
[slackware-security] sudo
2020-01-31 21:15:53
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : Sudo vulnerability (USN-4263-1)
2020-02-04 00:00:00
Oracle Linux 7 : sudo (ELSA-2020-0540)
2020-02-19 00:00:00
SUSE SLES12 Security Update : sudo (SUSE-SU-2020:0407-1)
2020-02-20 00:00:00
openvas
openvas
openSUSE: Security Advisory for sudo (openSUSE-SU-2020:0244-1)
2020-02-26 00:00:00
CentOS: Security Advisory for sudo (CESA-2020:0726)
2020-03-11 00:00:00
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2020-2237)
2020-10-21 00:00:00
archlinux
archlinux
[ASA-202002-2] sudo: privilege escalation
2020-02-06 00:00:00
freebsd
freebsd
sudo -- Potential bypass of Runas user restrictions
2020-01-30 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Sudo Project Sudo
2020-02-07 02:41:44
Exploit for Out-of-bounds Write in Sudo Project Sudo
2020-02-07 18:07:03
Exploit for Out-of-bounds Write in Sudo Project Sudo
2021-08-01 10:50:55
packetstorm
packetstorm
Sudo 1.8.25p Buffer Overflow
2020-02-04 00:00:00
nvd
nvd
CVE-2019-18634
2020-01-29 18:15:12
redhat
redhat
(RHSA-2020:0487) Important: sudo security update
2020-02-13 09:08:44
(RHSA-2020:0726) Important: sudo security update
2020-03-05 12:33:40
(RHSA-2020:0509) Important: sudo security update
2020-02-13 19:00:11
thn
thn
Sudo Bug Lets Non-Privileged Linux and macOS Users Run Commands as Root
2020-02-03 15:35:00
debian
debian
[SECURITY] [DSA 4614-1] sudo security update
2020-02-01 12:45:56
[SECURITY] [DSA 4614-1] sudo security update
2020-02-01 12:45:56
[SECURITY] [DLA 2094-1] sudo security update
2020-02-01 22:56:58
osv
osv
sudo - security update
2020-02-01 00:00:00
CVE-2019-18634
2020-01-29 18:15:12
sudo - security update
2020-02-01 00:00:00
zdt
zdt
Sudo 1.8.25p - Buffer Overflow Exploit
2020-02-04 00:00:00
Sudo 1.8.25p - (pwfeedback) Buffer Overflow Exploit
2020-02-05 00:00:00
centos
centos
sudo security update
2020-03-10 20:33:30
sudo security update
2020-02-18 22:21:38
prion
prion
Stack overflow
2020-01-29 18:15:00
ubuntucve
ubuntucve
CVE-2019-18634
2020-01-31 00:00:00
amazon
amazon
Important: sudo
2020-03-16 21:29:00
Important: sudo
2020-03-16 20:58:00
oraclelinux
oraclelinux
sudo security update
2020-02-13 00:00:00
sudo security update
2020-03-05 00:00:00
sudo security update
2020-02-19 00:00:00
cvelist
cvelist
CVE-2019-18634
2020-01-29 17:23:26
exploitpack
exploitpack
Sudo 1.8.25p - pwfeedback Buffer Overflow (PoC)
2020-02-04 00:00:00
cloudfoundry
cloudfoundry
USN-4263-1: Sudo vulnerability | Cloud Foundry
2020-02-20 00:00:00
redhatcve
redhatcve
CVE-2019-18634
2020-01-31 15:09:16
ubuntu
ubuntu
Sudo vulnerability
2020-02-03 00:00:00
Sudo vulnerability
2020-02-05 00:00:00
debiancve
debiancve
CVE-2019-18634
2020-01-29 18:15:12
cve
cve
CVE-2019-18634
2020-01-29 18:15:12
mageia
mageia
Updated sudo packages fix security vulnerability
2020-02-09 22:13:40
alpinelinux
alpinelinux
CVE-2019-18634
2020-01-29 18:15:12
suse
suse
Security update for sudo (important)
2020-02-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.8.31p2-alt1
2020-08-30 00:00:00
exploitdb
exploitdb
Sudo 1.8.25p - 'pwfeedback' Buffer Overflow (PoC)
2020-02-04 00:00:00
kitploit
kitploit
attackerkb
attackerkb
CVE-2019-18634
2020-01-29 00:00:00
gentoo
gentoo
sudo: Multiple vulnerabilities
2020-03-14 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: sudo-1.9.0-0.1.b1.fc31
2020-03-06 02:26:46
[SECURITY] Fedora 32 Update: sudo-1.9.0-0.1.b1.fc32
2020-03-16 20:47:21
ibm
ibm
