REDHAT-BUG-1283635: Race Condition

Published Nov 19, 2015

Updated

A vulnerability in functionality for adding support of SHA-2 digests along with the command was found. The sudoers plugin performs this digest verification while matching rules, and later independently calls execve() to execute the binary. This results in a race condition if the digest functionality is used as suggested (in fact, the rules are matched before the user is prompted for a password, so there is not negligible time frame to replace the binary from underneath sudo). Versions affected are since 1.8.7.

CVE assignment:

http://seclists.org/oss-sec/2015/q4/327

Affected Software

1 affected component

Sudo Sudo>=1.8.7

Event History

Nov 19, 2015

Data Sourced

via Red Hat·01:36 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1283635?

The severity of REDHAT-BUG-1283635 is considered critical due to the potential for a race condition vulnerability in the sudo functionality.

How do I fix REDHAT-BUG-1283635?

To fix REDHAT-BUG-1283635, update the sudo package to version 1.8.7 or later, where the vulnerability has been addressed.

What does REDHAT-BUG-1283635 affect?

REDHAT-BUG-1283635 affects Sudo versions from 1.8.7 and earlier that utilize SHA-2 digests.

What is the nature of the vulnerability in REDHAT-BUG-1283635?

The nature of the vulnerability in REDHAT-BUG-1283635 is a race condition that occurs during the execution of the sudo command.

Are there any known exploits for REDHAT-BUG-1283635?

Yes, there are known exploits for REDHAT-BUG-1283635 that leverage the race condition to execute unauthorized commands.