- 最新の開発バージョン1.9.0b1に更新してください

  - sudo_logsrvdおよびsudo_sendlogをファイルおよび適切なmanページに追加しました。解決： rhbz#1787823

  - pwfeedbackが有効な場合のスタックベースのバッファオーバーフロー。解決： rhbz#1796945

  - 次を修正します： CVE-2019-18634 

  - パスワードハッシュの代わりにシャドウファイルの！文字を使うと、すべてのsudoerアカウントにアクセスして実行できます。解決： rhbz#1786709

  - CVE-2019-19234を修正します

  - Runas ALL sudoerアカウントへのアクセス権を持つ攻撃者が、存在しないユーザーになりすます可能性があります。解決： rhbz#1786705

  - CVE-2019-19232を修正します

  - setrlimit（RLIMIT_CORE）：操作が許可されない警告メッセージの修正。解決： rhbz#1773148

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

An update of the sudo package has been released.

According to the versions of the sudo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** In Sudo through 1.8.29, the fact that a     user has been blocked (e.g., by using the ! character     in the shadow file instead of a password hash) is not     considered, allowing an attacker (who has access to a     Runas ALL sudoer account) to impersonate any blocked     user. NOTE: The software maintainer believes that this     CVE is not valid. Disabling local password     authentication for a user is not the same as disabling     all access to that user--the user may still be able to     login via other means (ssh key, kerberos, etc). Both     the Linux shadow(5) and passwd(1) manuals are clear on     this. Indeed it is a valid use case to have local     accounts that are _only_ accessible via sudo and that     cannot be logged into with a password. Sudo 1.8.30     added an optional setting to check the _shell_ of the     target user (not the encrypted password!) against the     contents of /etc/shells but that is not the same thing     as preventing access to users with an invalid password     hash.(CVE-2019-19234)

  - ** DISPUTED ** In Sudo through 1.8.29, an attacker with     access to a Runas ALL sudoer account can impersonate a     nonexistent user by invoking sudo with a numeric uid     that is not associated with any user. NOTE: The     software maintainer believes that this is not a     vulnerability because running a command via sudo as a     user not present in the local password database is an     intentional feature. Because this behavior surprised     some users, sudo 1.8.30 introduced an option to     enable/disable this behavior with the default being     disabled. However, this does not change the fact that     sudo was behaving as intended, and as documented, in     earlier versions.(CVE-2019-19232)

  - In Sudo before 1.8.26, if pwfeedback is enabled in     /etc/sudoers, users can trigger a stack-based buffer     overflow in the privileged sudo process. (pwfeedback is     a default setting in Linux Mint and elementary OS     however, it is NOT the default for upstream and many     other packages, and would exist only if enabled by an     administrator.) The attacker needs to deliver a long     string to the stdin of getln() in     tgetpass.c.(CVE-2019-18634)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** In Sudo through 1.8.29, an attacker with     access to a Runas ALL sudoer account can impersonate a     nonexistent user by invoking sudo with a numeric uid     that is not associated with any user. NOTE: The     software maintainer believes that this is not a     vulnerability because running a command via sudo as a     user not present in the local password database is an     intentional feature. Because this behavior surprised     some users, sudo 1.8.30 introduced an option to     enable/disable this behavior with the default being     disabled. However, this does not change the fact that     sudo was behaving as intended, and as documented, in     earlier versions.(CVE-2019-19232)

  - ** DISPUTED ** In Sudo through 1.8.29, the fact that a     user has been blocked (e.g., by using the ! character     in the shadow file instead of a password hash) is not     considered, allowing an attacker (who has access to a     Runas ALL sudoer account) to impersonate any blocked     user. NOTE: The software maintainer believes that this     CVE is not valid. Disabling local password     authentication for a user is not the same as disabling     all access to that user--the user may still be able to     login via other means (ssh key, kerberos, etc). Both     the Linux shadow(5) and passwd(1) manuals are clear on     this. Indeed it is a valid use case to have local     accounts that are _only_ accessible via sudo and that     cannot be logged into with a password. Sudo 1.8.30     added an optional setting to check the _shell_ of the     target user (not the encrypted password!) against the     contents of /etc/shells but that is not the same thing     as preventing access to users with an invalid password     hash.(CVE-2019-19234)

  - In Sudo before 1.8.26, if pwfeedback is enabled in     /etc/sudoers, users can trigger a stack-based buffer     overflow in the privileged sudo process. (pwfeedback is     a default setting in Linux Mint and elementary OS     however, it is NOT the default for upstream and many     other packages, and would exist only if enabled by an     administrator.) The attacker needs to deliver a long     string to the stdin of getln() in     tgetpass.c.(CVE-2019-18634)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

リモートの Redhat Enterprise Linux 8 ホストにインストールされているパッケージは、RHSA-2020: 1804のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - sudo: Runas ALL sudoerアカウントへのアクセス権を持つ攻撃者が、存在しないユーザーになりすます可能性があります（CVE-2019-19232）

  - sudo：パスワードハッシュの代わりにシャドーファイルで!文字を使用することで、run as all sudoerアカウントにアクセスできる（CVE-2019-19234）

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 1.8.29までの Sudo では、ユーザーが（パスワードハッシュの代わりに shadow ファイルでの ! 文字を使用することにより）ブロックされていた事実が考慮されておらず、 ）でブロックされたユーザーになりすます。注：ソフトウェアのメンテナーは、この CVE は有効ではないと考えています。ユーザーのローカルパスワード認証を無効にすることは、そのユーザーへのすべてのアクセスを無効にすることと同じではありません--the ユーザーは、依然として他の手段（ssh 鍵、kerberos など）でログインできる可能性があります。Linux shadow(5) と passwd(1) のマニュアルはどちらもこれについて明確です。実際、sudo 経由でのみアクセス可能で、パスワードではログインできないローカルアカウントを持つことは有効なユースケースです。Sudo 1.8.30 /etc/shells のコンテンツに対してターゲットユーザーの _shell_（暗号化されたパスワードではなく！）をチェックするためのオプションの設定を追加しましたが、これは無効なパスワードハッシュでユーザーへのアクセスを防止することとは異なります（CVE-2019-19234）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2020: 1804 公告中提及的多个漏洞影响。

  - sudo：如果攻击者具有 Runas ALL sudoer 帐户访问权限，则可冒充不存在的用户 (CVE-2019-19232)

  - sudo：通过使用影子文件中的 ! 字符（而非密码哈希）可访问 run as all sudoer 帐户 (CVE-2019-19234)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在到 1.8.29的 Sudo 中，未考虑用户已被阻断的事实（例如，通过使用影子文件中的 ! 字符而非密码哈希），从而允许攻击者（具有 Runas ALL sudoer 帐户访问权限的）模拟任何被阻断的用户。注意： 软件维护者认为此 CVE 无效。禁用用户的本地密码认证与禁用针对该用户的所有访问权限不同--the 用户仍可通过其他方式（ssh 密钥、kerberos 等）登录。Linux shadow(5) 和 passwd(1) 手册均明确说明此问题。事实上，_only_ 通过 sudo 访问且无法使用密码的本地帐户是一个有效的使用案例。Sudo 1.8.30 添加了一个可选设置以针对 /etc/shells 的内容检查目标用户的 _shell_（非加密的密码！），但这与防止访问具有无效密码哈希的用户不同（CVE-2019-19234)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2020: 1804 公告中提及的弱點影響。

  - sudo：如果攻擊者具有 Runas ALL sudoer 帳戶存取權，則可模擬不存在的使用者 (CVE-2019-19232)

  - sudo：使用遮蔽檔案中的 ! 字元 (而非密碼雜湊) 可作為所有 sudoer 帳戶存取執行 (CVE-2019-19234)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 至 1.8.29版之前的 Sudo 中，並未考慮使用者已遭封鎖 (例如，在陰影檔案中使用 ! 字元而非密碼雜湊) 的事實，進而允許攻擊者 (具有 Runas ALL sudoer 帳戶存取權) ) 來模擬任何封鎖的使用者。注意：軟體維護者認為此 CVE 無效。停用使用者的本機密碼驗證與停用該使用者的所有存取權不同--the 使用者仍可透過其他方式 (ssh 金鑰、kerberos 等) 登入。Linux shadow(5) 和 passwd(1) 手冊都對此有明確說明。確實，具有隻能透過 sudo 存取且無法以密碼登入的本機帳戶是有效的使用案例。Sudo 1.8.30 已新增一個選用設定，可針對 /etc/shells 的內容檢查目標使用者的 _shell_ (不是加密的密碼！)，但這與以無效密碼雜湊防止使用者存取並非一碼事 (CVE-2019-19234)

請注意，Nessus 依賴供應商報告的套件存在。

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1804 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    The following packages have been upgraded to a later upstream version: sudo (1.8.29). (BZ#1733961)

    Security Fix(es):

    * sudo: attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user     (CVE-2019-19232)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sudo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - In PHP before 5.6.28 and 7.x before 7.0.13, incorrect     handling of various URI components in the URL parser     could be used by attackers to bypass hostname-specific     URL checks, as demonstrated by     evil.example.com:80#@good.example.com/ and     evil.example.com:80?@good.example.com/ inputs to the     parse_url function (implemented in the php_url_parse_ex     function in ext/standard/url.c).(CVE-2019-19234)

  - In Sudo through 1.8.29, the fact that a user has been     blocked (e.g., by using the ! character in the shadow     file instead of a password hash) is not considered,     allowing an attacker (who has access to a Runas ALL     sudoer account) to impersonate any blocked     user.(CVE-2019-19232)

  - In Sudo before 1.8.26, if pwfeedback is enabled in     /etc/sudoers, users can trigger a stack-based buffer     overflow in the privileged sudo process. (pwfeedback is     a default setting in Linux Mint and elementary OS     however, it is NOT the default for upstream and many     other packages, and would exist only if enabled by an     administrator.) The attacker needs to deliver a long     string to the stdin of getln() in     tgetpass.c.(CVE-2019-18634)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the     shadow file instead of a password hash) is not considered, allowing an attacker (who has access to a Runas     ALL sudoer account) to impersonate any blocked user. NOTE: The software maintainer believes that this CVE     is not valid. Disabling local password authentication for a user is not the same as disabling all access     to that user--the user may still be able to login via other means (ssh key, kerberos, etc). Both the Linux     shadow(5) and passwd(1) manuals are clear on this. Indeed it is a valid use case to have local accounts     that are _only_ accessible via sudo and that cannot be logged into with a password. Sudo 1.8.30 added an     optional setting to check the _shell_ of the target user (not the encrypted password!) against the     contents of /etc/shells but that is not the same thing as preventing access to users with an invalid     password hash (CVE-2019-19234)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - In Sudo before 1.8.26, if pwfeedback is enabled in     /etc/sudoers, users can trigger a stack-based buffer     overflow in the privileged sudo process. (pwfeedback is     a default setting in Linux Mint and elementary OS     however, it is NOT the default for upstream and many     other packages, and would exist only if enabled by an     administrator.) The attacker needs to deliver a long     string to the stdin of getln() in     tgetpass.c.(CVE-2019-18634)

  - In Sudo through 1.8.29, an attacker with access to a     Runas ALL sudoer account can impersonate a nonexistent     user by invoking sudo with a numeric uid that is not     associated with any user.(CVE-2019-19232)

  - In Sudo through 1.8.29, the fact that a user has been     blocked (e.g., by using the ! character in the shadow     file instead of a password hash) is not considered,     allowing an attacker (who has access to a Runas ALL     sudoer account) to impersonate any blocked     user.(CVE-2019-19234)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** In Sudo through 1.8.29, the fact that a     user has been blocked (e.g., by using the ! character     in the shadow file instead of a password hash) is not     considered, allowing an attacker (who has access to a     Runas ALL sudoer account) to impersonate any blocked     user. NOTE: The software maintainer believes that this     CVE is not valid. Disabling local password     authentication for a user is not the same as disabling     all access to that user--the user may still be able to     login via other means (ssh key, kerberos, etc). Both     the Linux shadow(5) and passwd(1) manuals are clear on     this. Indeed it is a valid use case to have local     accounts that are _only_ accessible via sudo and that     cannot be logged into with a password. Sudo 1.8.30     added an optional setting to check the _shell_ of the     target user (not the encrypted password!) against the     contents of /etc/shells but that is not the same thing     as preventing access to users with an invalid password     hash.(CVE-2019-19234)

  - ** DISPUTED ** In Sudo through 1.8.29, an attacker with     access to a Runas ALL sudoer account can impersonate a     nonexistent user by invoking sudo with a numeric uid     that is not associated with any user. NOTE: The     software maintainer believes that this is not a     vulnerability because running a command via sudo as a     user not present in the local password database is an     intentional feature. Because this behavior surprised     some users, sudo 1.8.30 introduced an option to     enable/disable this behavior with the default being     disabled. However, this does not change the fact that     sudo was behaving as intended, and as documented, in     earlier versions.(CVE-2019-19232)

  - In Sudo before 1.8.26, if pwfeedback is enabled in     /etc/sudoers, users can trigger a stack-based buffer     overflow in the privileged sudo process. (pwfeedback is     a default setting in Linux Mint and elementary OS     however, it is NOT the default for upstream and many     other packages, and would exist only if enabled by an     administrator.) The attacker needs to deliver a long     string to the stdin of getln() in     tgetpass.c.(CVE-2019-18634)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Sudo before 1.8.26, if pwfeedback is enabled in     /etc/sudoers, users can trigger a stack-based buffer     overflow in the privileged sudo process. (pwfeedback is     a default setting in Linux Mint and elementary OS     however, it is NOT the default for upstream and many     other packages, and would exist only if enabled by an     administrator.) The attacker needs to deliver a long     string to the stdin of getln() in     tgetpass.c.(CVE-2019-18634)

  - ** DISPUTED ** In Sudo through 1.8.29, an attacker with     access to a Runas ALL sudoer account can impersonate a     nonexistent user by invoking sudo with a numeric uid     that is not associated with any user. NOTE: The     software maintainer believes that this is not a     vulnerability because running a command via sudo as a     user not present in the local password database is an     intentional feature. Because this behavior surprised     some users, sudo 1.8.30 introduced an option to     enable/disable this behavior with the default being     disabled. However, this does not change the fact that     sudo was behaving as intended, and as documented, in     earlier versions.(CVE-2019-19232)

  - ** DISPUTED ** In Sudo through 1.8.29, the fact that a     user has been blocked (e.g., by using the ! character     in the shadow file instead of a password hash) is not     considered, allowing an attacker (who has access to a     Runas ALL sudoer account) to impersonate any blocked     user. NOTE: The software maintainer believes that this     CVE is not valid. Disabling local password     authentication for a user is not the same as disabling     all access to that user--the user may still be able to     login via other means (ssh key, kerberos, etc). Both     the Linux shadow(5) and passwd(1) manuals are clear on     this. Indeed it is a valid use case to have local     accounts that are _only_ accessible via sudo and that     cannot be logged into with a password. Sudo 1.8.30     added an optional setting to check the _shell_ of the     target user (not the encrypted password!) against the     contents of /etc/shells but that is not the same thing     as preventing access to users with an invalid password     hash.(CVE-2019-19234)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- update to latest development version 1.9.0b1

  - added sudo_logsrvd and sudo_sendlog to files and their     appropriate man pages Resolves: rhbz#1787823

  - Stack based buffer overflow in when pwfeedback is     enabled Resolves: rhbz#1796945

  - fixes: CVE-2019-18634 

  - By using ! character in the shadow file instead of a     password hash can access to a run as all sudoer account     Resolves: rhbz#1786709

  - fixes CVE-2019-19234

  - attacker with access to a Runas ALL sudoer account can     impersonate a nonexistent user Resolves: rhbz#1786705

  - fixes CVE-2019-19232

  - setrlimit(RLIMIT_CORE): Operation not permitted warning     message fix Resolves: rhbz#1773148

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In Sudo through 1.8.29, an attacker with access to a     Runas ALL sudoer account can impersonate a nonexistent     user by invoking sudo with a numeric uid that is not     associated with any user. NOTE: The software maintainer     believes that this is not a vulnerability because     running a command via sudo as a user not present in the     local password database is an intentional feature.
    Because this behavior surprised some users, sudo 1.8.30     introduced an option to enable/disable this behavior     with the default being disabled. However, this does not     change the fact that sudo was behaving as intended, and     as documented, in earlier versions.(CVE-2019-19232)

  - In Sudo through 1.8.29, the fact that a user has been     blocked (e.g., by using the ! character in the shadow     file instead of a password hash) is not considered,     allowing an attacker (who has access to a Runas ALL     sudoer account) to impersonate any blocked user. NOTE:
    The software maintainer believes that this CVE is not     valid. Disabling local password authentication for a     user is not the same as disabling all access to that     user--the user may still be able to login via other     means (ssh key, kerberos, etc). Both the Linux     shadow(5) and passwd(1) manuals are clear on this.
    Indeed it is a valid use case to have local accounts     that are _only_ accessible via sudo and that cannot be     logged into with a password. Sudo 1.8.30 added an     optional setting to check the _shell_ of the target     user (not the encrypted password!) against the contents     of /etc/shells but that is not the same thing as     preventing access to users with an invalid password     hash.(CVE-2019-19234)

  - In Sudo before 1.8.26, if pwfeedback is enabled in     /etc/sudoers, users can trigger a stack-based buffer     overflow in the privileged sudo process. (pwfeedback is     a default setting in Linux Mint and elementary OS     however, it is NOT the default for upstream and many     other packages, and would exist only if enabled by an     administrator.) The attacker needs to deliver a long     string to the stdin of getln() in     tgetpass.c.(CVE-2019-18634)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
134253	Fedora 31：sudo（2020-8b563bc5f4）	Nessus	Fedora Local Security Checks	2020/3/6	2024/3/25	high
132985	Photon OS 1.0: Sudo PHSA-2020-1.0-0264	Nessus	PhotonOS Local Security Checks	2020/1/16	2020/1/18	high
135136	EulerOS Virtualization for ARM 64 3.0.6.0 : sudo (EulerOS-SA-2020-1349)	Nessus	Huawei Local Security Checks	2020/4/2	2022/5/13	high
133936	EulerOS 2.0 SP5 : sudo (EulerOS-SA-2020-1135)	Nessus	Huawei Local Security Checks	2020/2/24	2022/5/18	high
143004	RHEL 8：sudo（RHSA-2020: 1804)	Nessus	Red Hat Local Security Checks	2020/11/18	2024/11/7	high
222744	Linux Distros のパッチ未適用の脆弱性: CVE-2019-19234	Nessus	Misc.	2025/3/4	2025/8/21	high
143004	RHEL 8：sudo (RHSA-2020: 1804)	Nessus	Red Hat Local Security Checks	2020/11/18	2024/11/7	high
222744	Linux Distros 未修补的漏洞: CVE-2019-19234	Nessus	Misc.	2025/3/4	2025/8/21	high
143004	RHEL 8：sudo (RHSA-2020: 1804)	Nessus	Red Hat Local Security Checks	2020/11/18	2024/11/7	high
222744	Linux Distros 未修補弱點：CVE-2019-19234	Nessus	Misc.	2025/3/4	2025/8/21	high
143004	RHEL 8 : sudo (RHSA-2020:1804)	Nessus	Red Hat Local Security Checks	2020/11/18	2024/11/7	high
136267	EulerOS Virtualization for ARM 64 3.0.2.0 : sudo (EulerOS-SA-2020-1564)	Nessus	Huawei Local Security Checks	2020/5/1	2022/5/13	high
203040	Photon OS 3.0: Sudo PHSA-2020-3.0-0051	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/24	high
222744	Linux Distros Unpatched Vulnerability : CVE-2019-19234	Nessus	Misc.	2025/3/4	2025/8/21	high
141722	EulerOS Virtualization 3.0.2.2 : sudo (EulerOS-SA-2020-2196)	Nessus	Huawei Local Security Checks	2020/10/21	2022/5/11	high
138004	EulerOS Virtualization 3.0.6.0 : sudo (EulerOS-SA-2020-1785)	Nessus	Huawei Local Security Checks	2020/7/1	2022/5/12	high
134015	EulerOS 2.0 SP8 : sudo (EulerOS-SA-2020-1181)	Nessus	Huawei Local Security Checks	2020/2/25	2022/5/18	high
134253	Fedora 31 : sudo (2020-8b563bc5f4)	Nessus	Fedora Local Security Checks	2020/3/6	2024/3/25	high
135564	EulerOS 2.0 SP3 : sudo (EulerOS-SA-2020-1435)	Nessus	Huawei Local Security Checks	2020/4/15	2022/5/13	high
137504	EulerOS 2.0 SP2 : sudo (EulerOS-SA-2020-1662)	Nessus	Huawei Local Security Checks	2020/6/17	2022/5/13	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high