USN-8895-1: Sudo vulnerability
Ubuntu says Sudo time rules can be bypassed via TZ when timestamps omit a timezone.
Stories per day · 30 days
1 RSS
3 stories, newest first · one card per story
Stories tagged #sudoers
Sudo Security Vulnerability Lets Attackers Escalate Privileges
A Sudo flaw, CVE-2026-96512, lets local users bypass time-based sudoers rules via a crafted TZ variable.
CVE-2026-96512: sudo: TZ still affects NOTBEFORE/NOTAFTER
Sudo CVE-2026-96512 lets a local user shift sudoers time windows by abusing TZ.