REDHAT-BUG-1283635: Race Condition
First published: Thu Nov 19 2015(Updated: )
A vulnerability in functionality for adding support of SHA-2 digests along with the command was found. The sudoers plugin performs this digest verification while matching rules, and later independently calls execve() to execute the binary. This results in a race condition if the digest functionality is used as suggested (in fact, the rules are matched before the user is prompted for a password, so there is not negligible time frame to replace the binary from underneath sudo). Versions affected are since 1.8.7. CVE assignment: <a href="http://seclists.org/oss-sec/2015/q4/327">http://seclists.org/oss-sec/2015/q4/327</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CentOS Sudo | >=1.8.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/oss-sec/2015/q4/327
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1283636
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1283635#c2
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1183818
- https://www.sudo.ws/repos/sudo/rev/24a3d9215c64
- https://www.sudo.ws/repos/sudo/rev/397722cdd7ec
- https://www.sudo.ws/repos/sudo/rev/0cd3cc8fa195
- https://bugzilla.redhat.com/show_bug.cgi?id=1283635
Frequently Asked Questions
What is the severity of REDHAT-BUG-1283635?
The severity of REDHAT-BUG-1283635 is considered critical due to the potential for a race condition vulnerability in the sudo functionality.
How do I fix REDHAT-BUG-1283635?
To fix REDHAT-BUG-1283635, update the sudo package to version 1.8.7 or later, where the vulnerability has been addressed.
What does REDHAT-BUG-1283635 affect?
REDHAT-BUG-1283635 affects Sudo versions from 1.8.7 and earlier that utilize SHA-2 digests.
What is the nature of the vulnerability in REDHAT-BUG-1283635?
The nature of the vulnerability in REDHAT-BUG-1283635 is a race condition that occurs during the execution of the sudo command.
Are there any known exploits for REDHAT-BUG-1283635?
Yes, there are known exploits for REDHAT-BUG-1283635 that leverage the race condition to execute unauthorized commands.
- agent/type
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2015-8239
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sudo
- canonical/centos sudo