Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Mageia 8 Security Advisory: MGASA-2022-0426 for Sudo Heap Overflow

mageia
Calendar Grey November 17, 2022
Dist Mageia Esm H88
A security patch for Mageia has been implemented to rectify a heap overflow vulnerability caused by an out-of-bounds error during authentication processes.
Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read

Summary

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture. (CVE-2022-43995)

References

- https://bugs.mageia.org/show_bug.cgi?id=31089

- https://lists.suse.com/pipermail/sle-security-updates/2022-November/012820.html

- - https://www.cve.org/CVERecord?id=CVE-2022-43995

Topics%20covered

Topics Covered

security advisory moderate security update heap overflow Sudo authentication exploit Mageia

Resolution

SRPMS

- 8/core/sudo-1.9.5p2-2.1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 17 Nov 2022
URL: https://advisories.mageia.org/MGASA-2022-0426.html
Type: security
CVE: CVE-2022-43995

Topics%20covered

Topics Covered

security advisory moderate security update heap overflow Sudo authentication exploit Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here