Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sudo 缓冲区错误漏洞
Vulnerability Description
Sudo是一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.8.0至1.9.12版本存在缓冲区错误漏洞，该漏洞源于存在数组越界错误，可能导致基于堆的缓冲区超读。
CVSS Information
N/A
Vulnerability Type
N/A