CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
26.8%
sudo allows a system administrator to give users the ability to run commands as other users.
Two vulnerabilities have been discovered in sudo:
A local attacker could possibly gain the ability to run arbitrary commands with the privileges of other users or groups, including root.
There is no known workaround at this time.
All sudo users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-admin/sudo-1.8.3_p2"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | app-admin/sudo | < 1.8.3_p2 | UNKNOWN |