VDB

GCVE-110-MAGEIA-2023-133

GCVE-110-MAGEIA-2023-133
Advisory Published
Vulnetix · Advisory published April 11, 2023
Sudo before 1.9.13 does not escape control characters in log messages. (CVE-2023-28486) Sudo before 1.9.13 does not escape control characters in sudoreplay output. (CVE-2023-28487)

Affected Products

VendorProductVersionsPlatforms
Mageiarust0 (affected), 1.74.0-1.mga9 (unaffected)—
Mageiasudo0 (affected), 1.9.5p2-2.3.mga8 (unaffected), 0 (affected), * (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›