7

CVE-2015-8239

The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sudo Project ≫ Sudo Version 1.8.8
Sudo Project ≫ Sudo Version 1.8.8 Update b1
Sudo Project ≫ Sudo Version 1.8.8 Update b2
Sudo Project ≫ Sudo Version 1.8.8 Update b3
Sudo Project ≫ Sudo Version 1.8.8 Update rc1
Sudo Project ≫ Sudo Version 1.8.9
Sudo Project ≫ Sudo Version 1.8.9 Update b1
Sudo Project ≫ Sudo Version 1.8.9 Update b2
Sudo Project ≫ Sudo Version 1.8.9 Update p1
Sudo Project ≫ Sudo Version 1.8.9 Update p2
Sudo Project ≫ Sudo Version 1.8.9 Update p3
Sudo Project ≫ Sudo Version 1.8.9 Update p4
Sudo Project ≫ Sudo Version 1.8.9 Update p5
Sudo Project ≫ Sudo Version 1.8.9 Update rc1
Sudo Project ≫ Sudo Version 1.8.9 Update rc2
Sudo Project ≫ Sudo Version 1.8.10
Sudo Project ≫ Sudo Version 1.8.10 Update b1
Sudo Project ≫ Sudo Version 1.8.10 Update b2
Sudo Project ≫ Sudo Version 1.8.10 Update b3
Sudo Project ≫ Sudo Version 1.8.10 Update b4
Sudo Project ≫ Sudo Version 1.8.10 Update p1
Sudo Project ≫ Sudo Version 1.8.10 Update p2
Sudo Project ≫ Sudo Version 1.8.10 Update p3
Sudo Project ≫ Sudo Version 1.8.10 Update rc1
Sudo Project ≫ Sudo Version 1.8.10 Update rc2
Sudo Project ≫ Sudo Version 1.8.10 Update rc3
Sudo Project ≫ Sudo Version 1.8.11
Sudo Project ≫ Sudo Version 1.8.11 Update b1
Sudo Project ≫ Sudo Version 1.8.11 Update b2
Sudo Project ≫ Sudo Version 1.8.11 Update b3
Sudo Project ≫ Sudo Version 1.8.11 Update b4
Sudo Project ≫ Sudo Version 1.8.11 Update p1
Sudo Project ≫ Sudo Version 1.8.11 Update p2
Sudo Project ≫ Sudo Version 1.8.11 Update rc1
Sudo Project ≫ Sudo Version 1.8.11 Update rc2
Sudo Project ≫ Sudo Version 1.8.12
Sudo Project ≫ Sudo Version 1.8.12 Update b1
Sudo Project ≫ Sudo Version 1.8.12 Update b2
Sudo Project ≫ Sudo Version 1.8.12 Update b3
Sudo Project ≫ Sudo Version 1.8.12 Update rc1
Sudo Project ≫ Sudo Version 1.8.12 Update rc2
Sudo Project ≫ Sudo Version 1.8.13
Sudo Project ≫ Sudo Version 1.8.13 Update b1
Sudo Project ≫ Sudo Version 1.8.13 Update b2
Sudo Project ≫ Sudo Version 1.8.13 Update b3
Sudo Project ≫ Sudo Version 1.8.13 Update b4
Sudo Project ≫ Sudo Version 1.8.13 Update rc1
Sudo Project ≫ Sudo Version 1.8.13 Update rc2
Sudo Project ≫ Sudo Version 1.8.14
Sudo Project ≫ Sudo Version 1.8.14 Update b1
Sudo Project ≫ Sudo Version 1.8.14 Update b2
Sudo Project ≫ Sudo Version 1.8.14 Update b3
Sudo Project ≫ Sudo Version 1.8.14 Update b4
Sudo Project ≫ Sudo Version 1.8.14 Update p1
Sudo Project ≫ Sudo Version 1.8.14 Update p2
Sudo Project ≫ Sudo Version 1.8.14 Update p3
Sudo Project ≫ Sudo Version 1.8.14 Update rc1
Sudo Project ≫ Sudo Version 1.8.15
Sudo Project ≫ Sudo Version 1.8.15 Update b1
Sudo Project ≫ Sudo Version 1.8.15 Update b2
Sudo Project ≫ Sudo Version 1.8.15 Update b3
Sudo Project ≫ Sudo Version 1.8.15 Update b4
Sudo Project ≫ Sudo Version 1.8.15 Update b5
Sudo Project ≫ Sudo Version 1.8.15 Update rc1
Sudo Project ≫ Sudo Version 1.8.15 Update rc2
Sudo Project ≫ Sudo Version 1.8.15 Update rc3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.412
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7 1 5.9
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

http://www.openwall.com/lists/oss-security/2015/11/18/22
Third Party Advisory
Mailing List
https://bugzilla.redhat.com/show_bug.cgi?id=1283635
Patch
Third Party Advisory
Issue Tracking
https://www.sudo.ws/repos/sudo/rev/0cd3cc8fa195
Patch
Third Party Advisory
Issue Tracking
https://www.sudo.ws/repos/sudo/rev/24a3d9215c64
Patch
Third Party Advisory
Issue Tracking
https://www.sudo.ws/repos/sudo/rev/397722cdd7ec
Patch
Third Party Advisory
Issue Tracking