Skip to content
NewA calmer, faster ZeroHour

Sudo CVE-2019-18634 flaw allows Non-Privileged Linux and macOS Users run commands as Root

Security Affairsby @securityaffairs ()2 min read2 · 1 read
Analyze CVE-2019-18634 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2019-18634
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process
7.819%PoC ×2

From the original article

2 min read at securityaffairs.com

Apple researcher discovered an important vulnerability ( CVE-2019-18634 ) in ‘sudo’ utility that allows non-privileged Linux and macOS users to run commands as Root. Security expert Joe Vennix from Apple has discovered an important vulnerability in ‘sudo‘ utility, tracked as CVE-2019-18634 , that allows non-privileged Linux and macOS users to run commands as Root.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.