遠端 Debian 10 主機上安裝的多個套件受到 dla-3732 公告中提及的多個弱點影響。

  - 1.9.13 之前的 Sudo 不會逸出記錄訊息中的控製字元。(CVE-2023-28486)

  - 1.9.13 之前的 Sudo 不會逸出 sudoreplay 輸出中的控製字元。(CVE-2023-28487)

  - 在 sudo 處理 ipa_hostname 的過程中發現一個缺陷，其中 /etc/sssd/sssd.conf 的 ipa_hostname 不會在 sudo 中傳播。因此，這會導致應用程式存在權限管理錯誤弱點，用戶端主機因而仍能保留被收回的權限。(CVE-2023-7090)

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程 Debian 10 主机上安装的程序包受到 dla-3732 公告中提及的多个漏洞影响。

  - 1.9.13 版之前的 Sudo 不转义日志消息中的控制字符。(CVE-2023-28486)

  - 1.9.13 版之前的 Sudo 不转义 sudoreplay 输出中的控制字符。(CVE-2023-28487)

  - 在 sudo 处理 ipa_hostname 的过程中发现缺陷，其中 /etc/sssd/sssd.conf 的 ipa_hostname 不会在 sudo 中传播。因此，它会导致应用程序存在权限管理不当漏洞，客户端主机因而仍能保留被回收的权限。(CVE-2023-7090)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

リモートの Debian 10 ホストには、dla-3732 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - 1.9.13 より前の Sudo が、ログメッセージの制御文字をエスケープしません。(CVE-2023-28486)

  - 1.9.13 より前の Sudo が、sudoreplay 出力の制御文字をエスケープしません。(CVE-2023-28487)

  - ipa_hostname の処理において sudo に欠陥が見つかりました。/etc/sssd/sssd.conf からの ipa_hostname が sudo で伝播されません。したがって、クライアントホストが権限を撤回した後でも権限を保持するという、アプリケーションにおける権限の不適切な管理の脆弱性につながります。(CVE-2023-7090)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3732 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3732-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     February 03, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : sudo     Version        : 1.8.27-1+deb10u6     CVE ID         : CVE-2023-7090 CVE-2023-28486 CVE-2023-28487

    Sudo, a program designed to allow a sysadmin to give limited     root privileges to users and log root activity, was vulnerable.

    CVE-2023-7090

        A flaw was found in sudo in the handling of ipa_hostname, where         ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo.
        Therefore, it leads to privilege mismanagement vulnerability in         applications, where client hosts retain privileges even after         retracting them.

    CVE-2023-28486

        Sudo did not escape control characters in log messages.

    CVE-2023-28487

        Sudo did not escape control characters in sudoreplay output.

    For Debian 10 buster, these problems have been fixed in version     1.8.27-1+deb10u6.

    We recommend that you upgrade your sudo packages.

    For the detailed security status of sudo please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/sudo

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was     not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications,     where client hosts retain privileges even after retracting them. (CVE-2023-7090)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was     not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications,     where client hosts retain privileges even after retracting them. (CVE-2023-7090)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
189972	Debian dla-3732：sudo - 安全性更新	Nessus	Debian Local Security Checks	2024/2/3	2025/1/22	high
189972	Debian dla-3732：sudo - 安全更新	Nessus	Debian Local Security Checks	2024/2/3	2025/1/22	high
189972	Debian dla-3732 : sudo - セキュリティ更新	Nessus	Debian Local Security Checks	2024/2/3	2025/1/22	high
189972	Debian dla-3732 : sudo - security update	Nessus	Debian Local Security Checks	2024/2/3	2025/1/22	high
190273	EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1207)	Nessus	Huawei Local Security Checks	2024/2/8	2024/2/8	high
192431	EulerOS Virtualization 2.9.1 : sudo (EulerOS-SA-2024-1463)	Nessus	Huawei Local Security Checks	2024/3/21	2024/3/21	high
190294	EulerOS 2.0 SP9 : sudo (EulerOS-SA-2024-1187)	Nessus	Huawei Local Security Checks	2024/2/8	2024/2/8	high
192417	EulerOS Virtualization 2.9.0 : sudo (EulerOS-SA-2024-1478)	Nessus	Huawei Local Security Checks	2024/3/21	2024/3/21	high

检测

插件搜索

high

high

high

high

high

high

high

high