Stack-based buffer overflow in sudo (Alpine package)
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2019-18634 |
| CWE-ID | CWE-121 |
| Exploitation vector | Local |
| Public exploit | Public exploit code for vulnerability #1 is available. |
| Vulnerable software |
sudo (Alpine package) Operating systems & Components / Operating system package or component |
| Vendor | Alpine Linux Development Team |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Stack-based buffer overflow
EUVDB-ID: #VU24810
Risk: Low
CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]
CVE-ID: CVE-2019-18634
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the getln() function in tgetpass.c, if pwfeedback is enabled in /etc/sudoers. A local user can trigger stack-based buffer overflow and execute arbitrary code on the target system with elevated privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall update from vendor's website.
Vulnerable software versionssudo (Alpine package): 1.8.1p1-r0 - 1.8.29-r2
sudo (Alpine package):
CPE2.3- cpe:2.3:o:alpine:sudo_alpine_package:1.8.1p1-r0:*:*:*:*:alpine_linux:*:2.1
- cpe:2.3:o:alpine:sudo_alpine_package:1.8.3_p1-r0:*:*:*:*:alpine_linux:*:2.3
- cpe:2.3:o:alpine:sudo_alpine_package:1.8.3_p2-r0:*:*:*:*:alpine_linux:*:2.1
- cpe:2.3:o:alpine:sudo_alpine_package::*:*:*:*:alpine_linux:*:*
https://git.alpinelinux.org/aports/commit/?id=4657aaffc31f7533f34771b95358fa2f7c833b01
https://git.alpinelinux.org/aports/commit/?id=76c7cb0ae293d4800b471c9d7793a59609e304b1
https://git.alpinelinux.org/aports/commit/?id=8788474ba192c238921e2fbe2ff7e930445dcf24
https://git.alpinelinux.org/aports/commit/?id=335b433870315222476ab36d3844ac5782cfddbe
https://git.alpinelinux.org/aports/commit/?id=691af4d751b10236efa6cce5e2866dabfc5047dd
https://git.alpinelinux.org/aports/commit/?id=35cc1de5b1dd6af591cc931b96b045edab5d8525
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
