← Back

CVE-2015-8239

nvd nist
Published: Oct 10, 2017Modified: May 13, 2026

JSON object

Loading...
7.0
Vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.0 / Impact: 5.9
Source: NVD

Description

The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.

Affected (66)

Products: Sudo Project: Sudo
1 product
Sudo
Configuration A
66 vulnerable
Vulnerable SoftwareAffected Versions
Sudo Project
Version 1.8.10
Version 1.8.10 b1
Version 1.8.10 b2
Version 1.8.10 b3
Version 1.8.10 b4
Version 1.8.10 p1
Version 1.8.10 p2
Version 1.8.10 p3
Version 1.8.10 rc1
Version 1.8.10 rc2
Version 1.8.10 rc3
Version 1.8.11
Version 1.8.11 b1
Version 1.8.11 b2
Version 1.8.11 b3
Version 1.8.11 b4
Version 1.8.11 p1
Version 1.8.11 p2
Version 1.8.11 rc1
Version 1.8.11 rc2
Version 1.8.12
Version 1.8.12 b1
Version 1.8.12 b2
Version 1.8.12 b3
Version 1.8.12 rc1
Version 1.8.12 rc2
Version 1.8.13
Version 1.8.13 b1
Version 1.8.13 b2
Version 1.8.13 b3
Version 1.8.13 b4
Version 1.8.13 rc1
Version 1.8.13 rc2
Version 1.8.14
Version 1.8.14 b1
Version 1.8.14 b2
Version 1.8.14 b3
Version 1.8.14 b4
Version 1.8.14 p1
Version 1.8.14 p2
Version 1.8.14 p3
Version 1.8.14 rc1
Version 1.8.15
Version 1.8.15 b1
Version 1.8.15 b2
Version 1.8.15 b3
Version 1.8.15 b4
Version 1.8.15 b5
Version 1.8.15 rc1
Version 1.8.15 rc2
Version 1.8.15 rc3
Version 1.8.8
Version 1.8.8 b1
Version 1.8.8 b2
Version 1.8.8 b3
Version 1.8.8 rc1
Version 1.8.9
Version 1.8.9 b1
Version 1.8.9 b2
Version 1.8.9 p1
Version 1.8.9 p2
Version 1.8.9 p3
Version 1.8.9 p4
Version 1.8.9 p5
Version 1.8.9 rc1
Version 1.8.9 rc2

References (10)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: cve@mitre.org
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.