REDHAT-BUG-2374692: High severity Sudo Sudo vulnerability
Sudo's host (-h or --host) option is intended to be used in conjunction with the list option (-l or --list) to list a user's sudo privileges on a host other than the current one. However, due to a bug it was not restricted to listing privileges and could be used when running a command via sudo or editing a file with sudoedit. Depending on the rules present in the sudoers file this could allow a local privilege escalation attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2374692?
REDHAT-BUG-2374692 is classified as a critical vulnerability affecting the Sudo command.
How do I fix REDHAT-BUG-2374692?
To resolve REDHAT-BUG-2374692, update the Sudo package to the latest version provided by your distribution containing the fix.
What systems are affected by REDHAT-BUG-2374692?
REDHAT-BUG-2374692 affects the Sudo command on any systems using the vulnerable version.
Can REDHAT-BUG-2374692 lead to unauthorized access?
Yes, due to a bug, REDHAT-BUG-2374692 can potentially allow unauthorized users to execute commands with elevated privileges.
What functionalities are impacted by REDHAT-BUG-2374692?
REDHAT-BUG-2374692 impacts the ability to list and execute Sudo privileges across different hosts.