CVE-2019-18634

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.
References
Link Resource
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00029.html
http://packetstormsecurity.com/files/156174/Slackware-Security-Advisory-sudo-Updates.html Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/156189/Sudo-1.8.25p-Buffer-Overflow.html Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2020/Jan/40 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/01/30/6 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/01/31/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/05/2 Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/05/5 Exploit Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0487
https://access.redhat.com/errata/RHSA-2020:0509
https://access.redhat.com/errata/RHSA-2020:0540
https://access.redhat.com/errata/RHSA-2020:0726
https://lists.debian.org/debian-lts-announce/2020/02/msg00002.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/
https://seclists.org/bugtraq/2020/Feb/2 Mailing List Third Party Advisory
https://seclists.org/bugtraq/2020/Feb/3 Mailing List Third Party Advisory
https://seclists.org/bugtraq/2020/Jan/44 Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202003-12
https://security.netapp.com/advisory/ntap-20200210-0001/
https://support.apple.com/kb/HT210919 Third Party Advisory
https://usn.ubuntu.com/4263-1/
https://usn.ubuntu.com/4263-2/
https://www.debian.org/security/2020/dsa-4614 Third Party Advisory
https://www.sudo.ws/alerts/pwfeedback.html Exploit Vendor Advisory
https://www.sudo.ws/security.html Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00029.html
http://packetstormsecurity.com/files/156174/Slackware-Security-Advisory-sudo-Updates.html Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/156189/Sudo-1.8.25p-Buffer-Overflow.html Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2020/Jan/40 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/01/30/6 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/01/31/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/05/2 Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/02/05/5 Exploit Third Party Advisory
https://access.redhat.com/errata/RHSA-2020:0487
https://access.redhat.com/errata/RHSA-2020:0509
https://access.redhat.com/errata/RHSA-2020:0540
https://access.redhat.com/errata/RHSA-2020:0726
https://lists.debian.org/debian-lts-announce/2020/02/msg00002.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/
https://seclists.org/bugtraq/2020/Feb/2 Mailing List Third Party Advisory
https://seclists.org/bugtraq/2020/Feb/3 Mailing List Third Party Advisory
https://seclists.org/bugtraq/2020/Jan/44 Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202003-12
https://security.netapp.com/advisory/ntap-20200210-0001/
https://support.apple.com/kb/HT210919 Third Party Advisory
https://usn.ubuntu.com/4263-1/
https://usn.ubuntu.com/4263-2/
https://www.debian.org/security/2020/dsa-4614 Third Party Advisory
https://www.sudo.ws/alerts/pwfeedback.html Exploit Vendor Advisory
https://www.sudo.ws/security.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

History

21 Nov 2024, 04:33

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00029.html - () http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00029.html -
References () http://packetstormsecurity.com/files/156174/Slackware-Security-Advisory-sudo-Updates.html - Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/156174/Slackware-Security-Advisory-sudo-Updates.html - Third Party Advisory, VDB Entry
References () http://packetstormsecurity.com/files/156189/Sudo-1.8.25p-Buffer-Overflow.html - Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/156189/Sudo-1.8.25p-Buffer-Overflow.html - Third Party Advisory, VDB Entry
References () http://seclists.org/fulldisclosure/2020/Jan/40 - Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2020/Jan/40 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2020/01/30/6 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2020/01/30/6 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2020/01/31/1 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2020/01/31/1 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2020/02/05/2 - Third Party Advisory () http://www.openwall.com/lists/oss-security/2020/02/05/2 - Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2020/02/05/5 - Exploit, Third Party Advisory () http://www.openwall.com/lists/oss-security/2020/02/05/5 - Exploit, Third Party Advisory
References () https://access.redhat.com/errata/RHSA-2020:0487 - () https://access.redhat.com/errata/RHSA-2020:0487 -
References () https://access.redhat.com/errata/RHSA-2020:0509 - () https://access.redhat.com/errata/RHSA-2020:0509 -
References () https://access.redhat.com/errata/RHSA-2020:0540 - () https://access.redhat.com/errata/RHSA-2020:0540 -
References () https://access.redhat.com/errata/RHSA-2020:0726 - () https://access.redhat.com/errata/RHSA-2020:0726 -
References () https://lists.debian.org/debian-lts-announce/2020/02/msg00002.html - Mailing List, Third Party Advisory () https://lists.debian.org/debian-lts-announce/2020/02/msg00002.html - Mailing List, Third Party Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/ -
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/ -
References () https://seclists.org/bugtraq/2020/Feb/2 - Mailing List, Third Party Advisory () https://seclists.org/bugtraq/2020/Feb/2 - Mailing List, Third Party Advisory
References () https://seclists.org/bugtraq/2020/Feb/3 - Mailing List, Third Party Advisory () https://seclists.org/bugtraq/2020/Feb/3 - Mailing List, Third Party Advisory
References () https://seclists.org/bugtraq/2020/Jan/44 - Mailing List, Third Party Advisory () https://seclists.org/bugtraq/2020/Jan/44 - Mailing List, Third Party Advisory
References () https://security.gentoo.org/glsa/202003-12 - () https://security.gentoo.org/glsa/202003-12 -
References () https://security.netapp.com/advisory/ntap-20200210-0001/ - () https://security.netapp.com/advisory/ntap-20200210-0001/ -
References () https://support.apple.com/kb/HT210919 - Third Party Advisory () https://support.apple.com/kb/HT210919 - Third Party Advisory
References () https://usn.ubuntu.com/4263-1/ - () https://usn.ubuntu.com/4263-1/ -
References () https://usn.ubuntu.com/4263-2/ - () https://usn.ubuntu.com/4263-2/ -
References () https://www.debian.org/security/2020/dsa-4614 - Third Party Advisory () https://www.debian.org/security/2020/dsa-4614 - Third Party Advisory
References () https://www.sudo.ws/alerts/pwfeedback.html - Exploit, Vendor Advisory () https://www.sudo.ws/alerts/pwfeedback.html - Exploit, Vendor Advisory
References () https://www.sudo.ws/security.html - Vendor Advisory () https://www.sudo.ws/security.html - Vendor Advisory

07 Nov 2023, 03:06

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/', 'name': 'FEDORA-2020-7c1b270959', 'tags': [], 'refsource': 'FEDORA'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/', 'name': 'FEDORA-2020-8b563bc5f4', 'tags': [], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/ -

Information

Published : 2020-01-29 18:15

Updated : 2024-11-21 04:33


NVD link : CVE-2019-18634

Mitre link : CVE-2019-18634

CVE.ORG link : CVE-2019-18634


JSON object : View

Products Affected

debian

  • debian_linux

sudo_project

  • sudo
CWE
CWE-787

Out-of-bounds Write