Sudo vulnerability
USN-8895-1 fixed a vulnerability in Sudo. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Sudo did not properly handle time-based access restrictions when sudoers rules used NOTBEFORE or NOTAFTER with timestamps omitting the trailing timezone indicator. A local attacker could possibly use this issue to execute commands outside the intended time window by manipulating the TZ environment variable.
Read at Ubuntu Security Notices
- Vendor
- Canonical
- Product
- Ubuntu, sudo
- Exposure class
- Operating system
Why it ranks 34 (Notable)
- Product class: operating system
- Widely deployed vendor product (Canonical)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)