CVE-2023-7090
Sudo: improper handling of ipa_hostname leads to privilege mismanagement
Summary
Sudo: improper handling of ipa_hostname leads to privilege mismanagement
Original description
The description as published by the source.
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-7090 sudo Fixed in: 1.8.28p1-1
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- report bugzilla.redhat.com
- web access.redhat.com
- web lists.debian.org
- web packages.fedoraproject.org
- web sudo.ws