CVE-2023-22809
published 2023-01-18CVE-2023-22809: In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and…
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EXPLOIT
In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 13.4 | 13.4 |
| apple | macos_ventura | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | sudo | < sudo 1.9.12p2-1 (bookworm) | sudo 1.9.12p2-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| msrc | cbl2_sudo_1.9.12p2-1_on_cbl_mariner_2.0 | — | — |
| msrc | cm1_sudo_1.9.12p2-1_on_cbl_mariner_1.0 | — | — |
| paloalto | cloud_ngfw | — | — |
| paloalto | pan-os | — | — |
| paloalto | prisma_access | — | — |
| paloalto | prisma_sd-wan_ion | — | — |
| sudo_project | sudo | — | — |
| sudo_project | sudo | >= 0 < 1.9.5p2-3+deb11u1 | 1.9.5p2-3+deb11u1 |
| sudo_project | sudo | >= 0 < 1.9.12p2-1 | 1.9.12p2-1 |
| sudo_project | sudo | >= 0 < 1.9.12p2-1 | 1.9.12p2-1 |
| sudo_project | sudo | >= 0 < 1.9.12p2-1 | 1.9.12p2-1 |
| sudo_project | sudo | >= 0 < 1.8.21p2-3ubuntu1.5 | 1.8.21p2-3ubuntu1.5 |
| sudo_project | sudo | >= 0 < 1.8.31-1ubuntu1.4 | 1.8.31-1ubuntu1.4 |
| sudo_project | sudo | >= 0 < 1.9.9-1ubuntu2.2 | 1.9.9-1ubuntu2.2 |
| sudo_project | sudo | >= 0 < 1.8.9p5-1ubuntu1.5+esm7 | 1.8.9p5-1ubuntu1.5+esm7 |
| sudo_project | sudo | >= 0 < 1.8.16-0ubuntu1.10+esm1 | 1.8.16-0ubuntu1.10+esm1 |
| sudo_project | sudo | >= 1.8.0 < 1.9.12 | 1.9.12 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vulncheck7.8HIGH