Most recent entries from all

2NGA002579 — ABB Arctic communication solution ARM600 Vulnerabilities

ABB is aware of public reports of a vulnerabilities in product versions listed as affected in this advisory. An attacker who successfully exploited these vulnerabilities could cause the product to stop, make the product inacces-sible, take remote control of the product or insert and run arbitrary code. As part of ABB product lifecycle policy, once a product transitions to end-of-life, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document, such as using a private APN cellular network between Arctic wireless gateways and ARM600 for establishing VPN tunnels, to mitigate security risks and avoid potential vulnerabilities. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.

ALSA-2023:0282 — Important: sudo security update

Affected: AlmaLinux:9: sudo, AlmaLinux:9: sudo-python-plugin

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

* sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-00210

Withdrawn: BELL-CVE-2023-22809 — CVE-2023-22809 does not affect BellSoft software

Withdrawn by the publisher.

certfr-2023-avi-0043 — Une vulnérabilité a été découverte dans sudo. Elle permet à un attaquant de provoquer un contournement de la politique…

certfr-2023-avi-0043

EUVD-2026-227133

fkie_cve-2023-22809

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

GHSA-3vwp-294x-6v9c

gsd-2023-22809

ICSA-25-105-08 — ABB M2M Gateway

msrc_CVE-2023-22809 — In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environme…

msrc_CVE-2023-22809

OESA-2023-1049 — sudo security update

Affected: openEuler:20.03-LTS-SP1: sudo, openEuler:20.03-LTS-SP3: sudo, openEuler:22.03-LTS: sudo, openEuler:22.03-LTS-SP1: sudo

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fix(es): In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.(CVE-2023-22809)

openSUSE-SU-2024:12638-1 — sudo-1.9.12p2-1.1 on GA media

sudo-1.9.12p2-1.1 on GA media

RHSA-2023:0280 — Red Hat Security Advisory: sudo security update

sudo: arbitrary file write with privileges of the RunAs user

SUSE-SU-2023:0100-1 — Security update for sudo

Security update for sudo

UBUNTU-CVE-2023-22809

Affected: Ubuntu:Pro:14.04:LTS: sudo, Ubuntu:Pro:16.04:LTS: sudo, Ubuntu:18.04:LTS: sudo, Ubuntu:20.04:LTS: sudo, Ubuntu:22.04:LTS: sudo

WID-SEC-W-2023-0151 — sudo: Schwachstelle ermöglicht Privilegieneskalation

Ein lokaler Angreifer kann eine Schwachstelle in sudo ausnutzen, um seine Privilegien zu erhöhen.