4 ms·
Are there real-life examples where "traditional non-safe" sudo/su lead to problems?
by Galicarnax 3y ago
Are there real-life examples where "traditional non-safe" sudo/su lead to problems?
- mustache_kimono 3y agoPlenty. See: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sudo https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sudo Double free, just this year: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27320 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2732... Use after free: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0493 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0493 Recent buffer overflows: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3156 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3156, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18634 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1863... Buffer over-read: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43995 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4399...