Heap-based buffer overflow in Sudo
qualys.com
Heap-based buffer overflow in Sudo
1–10 of 328 posts
Re: Heap-based buffer overflow in Sudo
#2‹insert "oh shit" here›
Re: Heap-based buffer overflow in Sudo
#3One of those programs that you should not install unless you really need them.
Re: Heap-based buffer overflow in Sudo
#4> introduced in July 2011 (commit 8255ed69), and affects all legacy versions from 1.8.2 to 1.8.31p2 and all stable versions from 1.9.0 to 1.9.5p1, in their default configuration.
It looks like this is pretty far reaching. All of my boxes were vulnerable to this before updating today.
Re: Heap-based buffer overflow in Sudo
#5> introduced in July 2011 (commit 8255ed69), and affects all legacy versions from 1.8.2 to 1.8.31p2 and all stable versions from 1.9.0 to 1.9.5p1, in their default configuration.
It looks like this is pretty far reaching. All of my boxes were vulnerable to this before updating today.
Re: Heap-based buffer overflow in Sudo
#6"rewrite sudo in Rust" in 3,2...
Re: Heap-based buffer overflow in Sudo
#7Shouldn't this affect macOS?
Re: Heap-based buffer overflow in Sudo
#8sudo built with ASLR doesn't make a difference?
NM:
- we can defeat ASLR by partially overwriting the function pointer getenv_fn (which points to the function sudoers_hook_getenv() in the shared library sudoers.so); and luckily, the beginning of sudoers.so contains a call to execve() (or execv()):
Re: Heap-based buffer overflow in Sudo
#9I'm curious, is this one implementation of sudo really used everywhere?
I was under the impression that different Linux userspaces sometimes implement these common commands differently. Like "ls" sometimes actually being aliased to a bash script, or maybe BSD having one implementation and Ubuntu another. Is that not the case? Is "sudo" not maintained by an entity like gnu, bsd, etc?
edit - in other words, I always assumed "sudo" was a highly-dependent system-level tool, not just some useful helper binary that is maintained by one independent person.
Re: Heap-based buffer overflow in Sudo
#10One of those programs that you should not install unless you really need them.
Not sure if you were being sarcastic, but OpenBSD removed sudo several years ago. The native tool is doas: https://man.openbsd.org/doas sudo just became too complex, what with the feature creep demanded by corporate Linux users.