tocsin

Debian/sudo: unknown

Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.

Action: Upgrade sudo to 1.8.3p2-1 or later.

Affected

introducedfixedlast affected
01.8.3p2-1-

Fixed versions

1.8.3p2-1

Sources

published · modified · JSON