PT-2026-29973 · Sudo+1 · Sudo+1

Marc Deslauriers + 1 · Publicado 2026-03-12 · Atualizado 2026-06-04 · CVE-2026-35535

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sudo versões até 1.9.17p2

Description Uma falha na chamada de setuid, setgid ou setgroups durante uma queda de privilégios antes de executar o remetente não é um erro fatal e pode levar à escalada de privilégios.

Recommendations Atualize o Sudo para uma versão posterior a 1.9.17p2.

Correção

LPE

DoS

Improper Privilege Management

Enumeração de Fraquezas

CWE-271

CWE-269

Identificadores relacionados

ALSA-2026:10758

ALSA-2026:11521

ALSA-2026:12310

ALSA-2026:19067

ALSA-2026:19220

BDU:2026-04709

CVE-2026-35535

ECHO-34C9-A519-4B5C

OESA-2026-1908

OESA-2026-1996

OESA-2026-1997

OESA-2026-1998

OESA-2026-1999

OPENSUSE-SU-2026:10510-1

OPENSUSE-SU-2026:20604-1

RHSA-2026:10758

RHSA-2026:11521

RHSA-2026:12310

RHSA-2026:13731

RHSA-2026:13888

RHSA-2026:13889

RHSA-2026:13891

RHSA-2026:13892

RHSA-2026:13895

RHSA-2026:13896

RHSA-2026:14228

RHSA-2026:14437

RHSA-2026:19067

RHSA-2026:19220

SUSE-SU-2026:1308-1

SUSE-SU-2026:1309-1

SUSE-SU-2026:1359-1

SUSE-SU-2026:21252-1

SUSE-SU-2026:21273-1

USN-8092-1

Produtos afetados

Rocky Linux

Sudo

Referências · 75

• https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69 · Correção
• https://access.redhat.com/errata/RHSA-2026:19220 · Nota
• https://osv.dev/vulnerability/OESA-2026-1997 · Aviso do Fabricante
• https://twitter.com/Cezar_H_Linux/status/2051008004934234327 · Publicação no Twitter
• https://suse.com/support/update/announcement/2026/suse-su-202621252-1 · Nota
• https://bdu.fstec.ru/vul/2026-04709 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2026:1308-1 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2026-12310.html · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2026:10510-1 · Aviso do Fabricante
• https://altsp.su/obnovleniya-bezopasnosti · Nota
• https://ubuntu.com/security/vulnerabilities/crackarmor · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2026-1908 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2026:10758 · Nota
• https://access.redhat.com/security/cve/CVE-2026-35535 · Nota
• https://security-tracker.debian.org/tracker/CVE-2026-35535 · Aviso do Fabricante