nixCraft Linux / UNIX Newsletter

Critical bug in sudo puts Linux and Unix systems at risk

Posted: 27 Jan 2021 12:39 AM PST

Any logged-in unprivileged user can abuse an old bug in sudo to gain root privileges. It was rated as an important security issue for Linux and Unix-like operating systems. The Qualys research team has discovered the heap overflow vulnerability in sudo itself has been hiding in plain sight for nearly 10 years. The bug allows any local users to gain root access without authentication (no user's password needed). We need to apply patches to our operating systems as soon as possible.

The post Critical bug in sudo puts Linux and Unix systems at risk appeared first on nixCraft.