The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1700-1 advisory.

    - CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362).
    - CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3732 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3732-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                   Bastien Roucaris     February 03, 2024                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : sudo     Version        : 1.8.27-1+deb10u6     CVE ID         : CVE-2023-7090 CVE-2023-28486 CVE-2023-28487

    Sudo, a program designed to allow a sysadmin to give limited     root privileges to users and log root activity, was vulnerable.

    CVE-2023-7090

        A flaw was found in sudo in the handling of ipa_hostname, where         ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo.
        Therefore, it leads to privilege mismanagement vulnerability in         applications, where client hosts retain privileges even after         retracting them.

    CVE-2023-28486

        Sudo did not escape control characters in log messages.

    CVE-2023-28487

        Sudo did not escape control characters in sudoreplay output.

    For Debian 10 buster, these problems have been fixed in version     1.8.27-1+deb10u6.

    We recommend that you upgrade your sudo packages.

    For the detailed security status of sudo please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/sudo

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0811 advisory.

    The sudo packages contain the sudo utility which allows system     administrators to provide certain users with the permission to execute     privileged commands, which are used for system management purposes, without     having to log in as root.

    Bug Fix(es) and Enhancement(s):

    * CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
    * CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
    * CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Sudo before 1.9.13 does not escape control characters in sudoreplay output.(CVE-2023-28487)

    Sudo before 1.9.13 does not escape control characters in log messages.(CVE-2023-28486)

Tenable has extracted the preceding description block directly from the EulerOS sudo security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0956 advisory.

    This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 8.6. It addresses 4 CVEs:
    CVE-2023-22809, CVE-2023-42465, CVE-2023-28486, CVE-2023-28487.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
173733	SUSE SLES12 Security Update : sudo (SUSE-SU-2023:1700-1)	Nessus	SuSE Local Security Checks	2023/3/31	2026/6/26	medium
189972	Debian dla-3732 : sudo - security update	Nessus	Debian Local Security Checks	2024/2/3	2025/1/22	high
190517	RHEL 8 / 9 : sudo (RHSA-2024:0811)	Nessus	Red Hat Local Security Checks	2024/2/14	2026/1/21	high
202967	EulerOS 2.0 SP8 : sudo (EulerOS-SA-2024-2055)	Nessus	Huawei Local Security Checks	2024/7/22	2024/7/22	medium
355993	Rocky Linux 8.6 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-devel Multiple Vulnerabilities (ciqsa-2026_0956)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/2	high

检测

插件搜索

medium

high

high

medium

high