PT-2020-1637 · Todd Miller+5 · Sudo+5
Joe Vennix
+1
·
Published
2018-12-07
·
Updated
2025-05-08
·
CVE-2019-18634
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Sudo versions prior to 1.8.31
Description
The issue is related to a stack-based buffer overflow in the privileged sudo process when the pwfeedback option is enabled in /etc/sudoers. This option is not enabled by default but is active in some distributions like Linux Mint and Elementary OS. An attacker can trigger the buffer overflow by delivering a long string to the stdin of getln() in tgetpass.c. This can potentially allow a low-privileged user to execute arbitrary commands with root privileges.
Recommendations
To resolve the issue, update to Sudo version 1.8.31 or later.
As a temporary workaround, consider disabling the pwfeedback option in /etc/sudoers to minimize the risk of exploitation.
Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Red Hat
Sudo
Suse
Ubuntu