There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions
    if the authenticating rule allowed the user to execute any command. Rules that only allowed to
    authenticated user to execute specific commands were not affected by this issue. (CVE-2019-25016)

遠端主機受到 GLSA-202107-11 中所述的弱點影響 (OpenDoas：環境篩選不足)

    提升權限後，OpenDoas 未正確從產生的 shell 篩選 PATH 變數。
  影響：

    如果使用者使用含有遭破壞 PATH 變數的 OpenDoas，則可控制使用者 PATH 變數的本機攻擊者可能會提升權限。
  因應措施：

    目前尚無已知的因應措施。

远程主机受到 GLSA-202107-11 中所述漏洞的影响 （OpenDoas：环境过滤不充分）

    升级权限后，OpenDoas 无法从生成的 shell 中正确筛选 PATH 变量。
  影响：

    如果用户使用包含已中毒 PATH 变量的 OpenDoas，则具有用户 PATH 变量控制权的本地攻击者可能会升级特权。
  变通方案：

    目前无任何已知的变通方案。

The remote host is affected by the vulnerability described in GLSA-202107-11 (OpenDoas: Insufficient environment filtering)

    OpenDoas does not properly filter the PATH variable from the resulting       shell after escalating privileges.
  Impact :

    A local attacker with control of a user&rsquo;s PATH variable could escalate       privileges if that user uses OpenDoas with a poisoned PATH variable.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
423861	Alpine: multiple doas packages: security update to 6.8-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
404093	Alpine: doas: security update to 6.6.1-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
423861	Alpine: multiple doas packages: security update to 6.8-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	high
404091	Alpine: doas: security update to 6.6.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
404092	Alpine: doas: security update to 6.6.1-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
404091	Alpine: doas: security update to 6.6.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
404092	Alpine: doas: security update to 6.6.1-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
404093	Alpine: doas: security update to 6.6.1-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	high
157037	GLSA-202107-11：OpenDoas：環境篩選不足	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
157037	GLSA-202107-11：OpenDoas：环境过滤不充分	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
157037	GLSA-202107-11 : OpenDoas: Insufficient environment filtering	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high