sudo: Sudo does not escape control characters in log messages
Published Mar 16, 2023
5.3
MEDIUMCVSS 3.1
EPSS 0.92%
Description
Sudo before 1.9.13 does not escape control characters in log messages.
Affected products
No data.
Configuration 1
- < 1.9.13
Configuration 2
- n/a
No data.
RHODF-4.15-RHEL-9
odf4/cephcsi-rhel9:v4.15.0-37
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/mcg-core-rhel9:v4.15.0-68
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/mcg-operator-bundle:v4.15.0-158
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/mcg-rhel9-operator:v4.15.0-39
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/ocs-client-console-rhel9:v4.15.0-58
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/ocs-client-operator-bundle:v4.15.0-158
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/ocs-client-rhel9-operator:v4.15.0-13
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/ocs-metrics-exporter-rhel9:v4.15.0-81
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/ocs-operator-bundle:v4.15.0-158
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/ocs-rhel9-operator:v4.15.0-79
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-cli-rhel9:v4.15.0-22
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-console-rhel9:v4.15.0-57
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-cosi-sidecar-rhel9:v4.15.0-6
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-csi-addons-operator-bundle:v4.15.0-158
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-csi-addons-rhel9-operator:v4.15.0-15
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-csi-addons-sidecar-rhel9:v4.15.0-15
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-multicluster-console-rhel9:v4.15.0-54
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-multicluster-operator-bundle:v4.15.0-158
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-multicluster-rhel9-operator:v4.15.0-10
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-must-gather-rhel9:v4.15.0-26
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-operator-bundle:v4.15.0-158
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odf-rhel9-operator:v4.15.0-19
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odr-cluster-operator-bundle:v4.15.0-158
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odr-hub-operator-bundle:v4.15.0-158
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/odr-rhel9-operator:v4.15.0-21
Fixed · RHSA-2024:1383
RHODF-4.15-RHEL-9
odf4/rook-ceph-rhel9-operator:v4.15.0-103
Fixed · RHSA-2024:1383
Red Hat Enterprise Linux 8
sudo-0:1.9.5p2-1.el8_9
Fixed · RHSA-2024:0811
Red Hat Enterprise Linux 8.6 Extended Update Support
sudo-0:1.9.5p2-1.el8_6
Fixed · RHSA-2024:0811
Red Hat Enterprise Linux 8.8 Extended Update Support
sudo-0:1.9.5p2-1.el8_8
Fixed · RHSA-2024:0811
Red Hat Enterprise Linux 9
sudo-0:1.9.5p2-10.el9_3
Fixed · RHSA-2024:0811
Red Hat Enterprise Linux 9
sudo-0:1.9.5p2-10.el9_3
Fixed · RHSA-2024:0811
Red Hat Enterprise Linux 9.0 Extended Update Support
sudo-0:1.9.5p2-7.el9_0.4
Fixed · RHSA-2024:0811
Red Hat Enterprise Linux 9.2 Extended Update Support
sudo-0:1.9.5p2-9.el9_2.2
Fixed · RHSA-2024:0811
Red Hat Enterprise Linux 6
sudo
Out of support scope
Red Hat Enterprise Linux 7
sudo
Out of support scope
| Product | Package | State | Advisory |
|---|---|---|---|
| RHODF-4.15-RHEL-9 | odf4/cephcsi-rhel9:v4.15.0-37 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/mcg-core-rhel9:v4.15.0-68 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/mcg-operator-bundle:v4.15.0-158 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/mcg-rhel9-operator:v4.15.0-39 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/ocs-client-console-rhel9:v4.15.0-58 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/ocs-client-operator-bundle:v4.15.0-158 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/ocs-client-rhel9-operator:v4.15.0-13 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/ocs-metrics-exporter-rhel9:v4.15.0-81 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/ocs-operator-bundle:v4.15.0-158 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/ocs-rhel9-operator:v4.15.0-79 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-cli-rhel9:v4.15.0-22 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-console-rhel9:v4.15.0-57 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-cosi-sidecar-rhel9:v4.15.0-6 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-csi-addons-operator-bundle:v4.15.0-158 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-csi-addons-rhel9-operator:v4.15.0-15 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-csi-addons-sidecar-rhel9:v4.15.0-15 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-multicluster-console-rhel9:v4.15.0-54 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-multicluster-operator-bundle:v4.15.0-158 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-multicluster-rhel9-operator:v4.15.0-10 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-must-gather-rhel9:v4.15.0-26 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-operator-bundle:v4.15.0-158 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odf-rhel9-operator:v4.15.0-19 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odr-cluster-operator-bundle:v4.15.0-158 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odr-hub-operator-bundle:v4.15.0-158 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/odr-rhel9-operator:v4.15.0-21 | Fixed | RHSA-2024:1383 |
| RHODF-4.15-RHEL-9 | odf4/rook-ceph-rhel9-operator:v4.15.0-103 | Fixed | RHSA-2024:1383 |
| Red Hat Enterprise Linux 8 | sudo-0:1.9.5p2-1.el8_9 | Fixed | RHSA-2024:0811 |
| Red Hat Enterprise Linux 8.6 Extended Update Support | sudo-0:1.9.5p2-1.el8_6 | Fixed | RHSA-2024:0811 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | sudo-0:1.9.5p2-1.el8_8 | Fixed | RHSA-2024:0811 |
| Red Hat Enterprise Linux 9 | sudo-0:1.9.5p2-10.el9_3 | Fixed | RHSA-2024:0811 |
| Red Hat Enterprise Linux 9 | sudo-0:1.9.5p2-10.el9_3 | Fixed | RHSA-2024:0811 |
| Red Hat Enterprise Linux 9.0 Extended Update Support | sudo-0:1.9.5p2-7.el9_0.4 | Fixed | RHSA-2024:0811 |
| Red Hat Enterprise Linux 9.2 Extended Update Support | sudo-0:1.9.5p2-9.el9_2.2 | Fixed | RHSA-2024:0811 |
| Red Hat Enterprise Linux 6 | sudo | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | sudo | Out of support scope | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (10)
- https://access.redhat.com/security/cve/CVE-2023-28486 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2179272 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32156 Advisory
- https://github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca Patch
- https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_13 Release Notes
- https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html mailing-list
- https://nvd.nist.gov/vuln/detail/CVE-2023-28486
- https://security.gentoo.org/glsa/202309-12 vendor-advisoryThird Party Advisory
- https://security.netapp.com/advisory/ntap-20230420-0002/ Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-28486
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2023-28486 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2179272 | Issue Tracking | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-32156 | Advisory | |
| https://github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca | Patch | |
| https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_13 | Release Notes | |
| https://lists.debian.org/debian-lts-announce/2024/02/msg00002.html | mailing-list | |
| https://nvd.nist.gov/vuln/detail/CVE-2023-28486 | ||
| https://security.gentoo.org/glsa/202309-12 | vendor-advisoryThird Party Advisory | |
| https://security.netapp.com/advisory/ntap-20230420-0002/ | Third Party Advisory | |
| https://www.cve.org/CVERecord?id=CVE-2023-28486 |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data