Sudo before 1.9.13 does not escape control characters in sudoreplay output.
References
Link | Resource |
---|---|
https://github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca | Patch |
https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_13 | Release Notes |
https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html | |
https://security.gentoo.org/glsa/202309-12 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20230420-0002/ | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-03-16T00:00:00
Updated: 2024-02-03T11:06:20.873717
Reserved: 2023-03-16T00:00:00
Link: CVE-2023-28487
JSON object: View
NVD Information
Status : Modified
Published: 2023-03-16T01:15:47.067
Modified: 2024-02-03T11:15:14.343
Link: CVE-2023-28487
JSON object: View
Redhat Information
No data.
CWE