PT-2019-13036 · Gerard Boginsky · Gsudo
CVE-2019-12937
·
Publicado
2019-06-23
·
Atualizado
2022-09-29
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
gsudo versions prior to 1.10.9
Description
The issue allows for local privilege escalation to the root user. This is achieved via the DISPLAY environment variable, which is used to exploit a buffer overflow in the gsudo.c application.
Recommendations
For versions prior to 1.10.9, update to version 1.10.9 or later to resolve the issue.
Exploit
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gsudo