Stay Secure with the Latest Linux Advisories

security advisoryprivilege escalationenvironment variable

Mageia 8: 2023-0025 Critical: Sudo Privilege Escalation

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because . MGASA-2023-0025 - Updated sudo packages fix security vulnerability Publication date: 24 Jan 2023 URL: https://advisories.mageia.org/MGASA-2023-0025.html Type: security Affected Mageia releases: 8 CVE: CVE-2023-22809 In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value. (CVE-2023-22809) References: - https://bugs.mageia.org/show_bug.cgi?id=31437 - - https://lists.debian.org/debian-security-announce/2023/msg00010.html - https://ubuntu.com/security/notices/USN-5811-1 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/ - https://www.cve.org/CVERecord?id=CVE-2023-22809 SRPMS: - 8/core/sudo-1.9.5p2-2.2.mga8 . Recent updates to the sudo packages in Mageia address a vulnerability that could lead to privilege escalation caused by improper handling of environment variables.. Mageia Advisory, Sudo Security Update, Local Privilege Escalation. . Severity: Critical. LinuxSecurity.com Team

Jan 24, 2023 •Critical Mageia