PT-2023-1647 · Sudo+4 · Sudo+4

Publicado 2023-02-27 · Atualizado 2025-07-02 · CVE-2023-27320

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sudo versions prior to 1.9.13p2

Description The issue is related to a double free in the per-command chroot feature of the Sudo program. This can potentially allow an attacker to cause a denial of service.

Recommendations For versions prior to 1.9.13p2, update to version 1.9.13p2 or later to resolve the issue.

Exploit

Correção

Double Free

Enumeração de Fraquezas

CWE-415

Identificadores relacionados

ALT-PU-2023-1357

ALT-PU-2023-1440

ALT-PU-2024-7909

AZL-13784

BDU:2023-01183

CVE-2023-27320

OESA-2023-1160

OESA-2023-1172

OPENSUSE-SU-2024:12795-1

SUSE-SU-2023:1665-1

SUSE-SU-2023_1665-1

USN-5908-1

Produtos afetados

Alt Linux

Linuxmint

Sudo

Suse

Ubuntu

Referências · 48

• 🔥 https://openwall.com/lists/oss-security/2023/02/28/1 · Exploit
• https://access.redhat.com/security/cve/cve-2023-27320 · Nota
• https://security.gentoo.org/glsa/202309-12 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-27320 · Nota de Segurança
• https://t.me/cvenotify/46433 · Publicação no Telegram
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1172 · Nota
• https://suse.com/security/cve/CVE-2023-27320.html · Nota
• https://bugzilla.suse.com/1206483 · Nota
• https://t.me/pentestingnews/33566 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-27320 · Aviso do Fabricante
• https://twitter.com/arturox_x/status/1940241782878740708 · Publicação no Twitter
• https://security.netapp.com/advisory/ntap-20230413-0009 · Nota
• https://ubuntu.com/security/notices/USN-5908-1 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLXMRAMXC3BYL4DNKVTK3V6JDMUXZ7B · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-27320 · Aviso do Fabricante