CVE-2023-7090: A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to…

PriorityP349high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

EPSS

0.69%

48.9th percentile

A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	sudo	< sudo 1.8.28p1-1 (bookworm)	sudo 1.8.28p1-1 (bookworm)
sudo_project	sudo	< 1.8.28	1.8.28
sudo_project	sudo	>= 0 < 1.8.28p1-1	1.8.28p1-1
sudo_project	sudo	>= 0 < 1.8.28p1-1	1.8.28p1-1
sudo_project	sudo	>= 0 < 1.8.28p1-1	1.8.28p1-1
sudo_project	sudo	>= 0 < 1.8.28p1-1	1.8.28p1-1

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

osv8.8HIGH

vendor_debian6.6MEDIUM

vendor_redhat6.6MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.