tocsin

Debian/sudo: high 7.1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered

Action: Upgrade sudo to 1.9.12p1-1 or later.

Affected

introducedfixedlast affected
01.9.12p1-1-

Fixed versions

1.9.12p1-1

Sources

published · modified · JSON