USN-4705-1

Dashboard / Vulnerabilities / USN-4705-1

USN-4705-1

Summary: sudo vulnerabilities

Details: It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue to obtain unintended access to the administrator account. (CVE-2021-3156) It was discovered that the Sudo sudoedit utility incorrectly handled checking directory permissions. A local attacker could possibly use this issue to bypass file permissions and determine if a directory exists or not. (CVE-2021-23239)

References: https://ubuntu.com/security/notices/USN-4705-1, https://ubuntu.com/security/CVE-2021-3156, https://ubuntu.com/security/CVE-2021-23239