Improper Authentication in Sudo - CVE-2023-42465

Vulnerability identifier: #VU85764

CSH Severity: Low

CVSS v4 BT: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-42465

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to bypass authentication process.

The vulnerability exists due to insufficient resistance to rowhammer attacks. A local user can bypass authentication process and gain unauthorized access to the system.

Sudo
Gentoo Linux
Amazon Linux AMI
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
openSUSE Leap Micro
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
openSUSE Leap
openEuler
Fedora
Dell Data Protection Central
PowerProtect DP Series Appliance (IDPA)
PowerStore X
PowerStore T
Storage Resource Manager
Storage Ceph
Storage Protect Plus Server
EMC Cloud Tiering Appliance
IBM Integrated Analytics System
LANTIME Operating System Firmware (LTOS)
PowerScale OneFS
Juniper Secure Analytics (JSA)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
sudo
sudo-devel
sudo-debuginfo
sudo-debugsource
sudo-help
sudo (Red Hat package)
sudo-plugin-python
sudo-plugin-python-debuginfo
sudo-test
app-admin/sudo
sudo-python-plugin
sudo-logsrvd
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
OpenShift Data Foundation (formerly OpenShift Container Storage)
Dell EMC Storage Monitoring and Reporting (SMR)
Red Hat Ceph Storage
IBM Qradar SIEM

Install updates from vendor's website.

Sudo - update to 1.9.15p1
IBM Integrated Analytics System - update to 1.0.31.0
LANTIME Operating System Firmware (LTOS) - update to 7.08.007
Juniper Secure Analytics (JSA) - update to 7.5.0 UP8 IF03
sudo - addressed in versions 1.8.23-10.58, 1.8.23-10.59
sudo - addressed in versions 1.8.27-4.45.1, 1.8.27-150000.4.50.1, 1.9.9-150400.4.33.1, 1.9.12p1-150500.7.7.1
sudo-devel - addressed in versions 1.8.27-4.45.1, 1.8.27-150000.4.50.1, 1.9.9-150400.4.33.1, 1.9.12p1-150500.7.7.1
sudo-debuginfo - addressed in versions 1.8.27-4.45.1, 1.8.27-150000.4.50.1, 1.9.9-150400.4.33.1, 1.9.12p1-150500.7.7.1
sudo-debugsource - addressed in versions 1.8.27-4.45.1, 1.8.27-150000.4.50.1, 1.9.9-150400.4.33.1, 1.9.12p1-150500.7.7.1
sudo-help - update to 1.9.2-15
sudo-debugsource - update to 1.9.2-15
sudo-debuginfo - update to 1.9.2-15
sudo-devel - update to 1.9.2-15
sudo - update to 1.9.2-15
sudo - addressed in versions 1.9.5p2-1.0.1, 1.9.15p2-1
sudo (Red Hat package) - addressed in versions 1.9.5p2-1.el8_6, 1.9.5p2-1.el8_8, 1.9.5p2-1.el8_9, 1.9.5p2-7.el9_0.4, 1.9.5p2-9.el9_2.2, 1.9.5p2-10.el9_3
sudo-plugin-python - addressed in versions 1.9.9-150400.4.33.1, 1.9.12p1-150500.7.7.1
sudo-plugin-python-debuginfo - addressed in versions 1.9.9-150400.4.33.1, 1.9.12p1-150500.7.7.1
sudo-test - addressed in versions 1.9.9-150400.4.33.1, 1.9.12p1-150500.7.7.1
app-admin/sudo - update to 1.9.12-r1
sudo-python-plugin - update to 1.9.15p2-1
sudo-logsrvd - update to 1.9.15p2-1
sudo-devel - update to 1.9.15p2-1
sudo - addressed in versions 1.9.15-1.p5.fc38, 1.9.15-1.p5.fc39, 1.9.15-1.p5.fc40
PowerStore X - update to 3.2.1.4-2386214
PowerStore T - update to 4.0.0.2-2365061
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.5
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.15.0
Storage Resource Manager - update to 5.0.1.0
Dell EMC Storage Monitoring and Reporting (SMR) - update to 5.0.1.0
Red Hat Ceph Storage - update to 5.3
Dell Secure Connect Gateway - update to 5.24.00.14
Storage Ceph - update to 7.0
IBM Qradar SIEM - update to 7.5.0 Update Pack 8 IF01
PowerScale OneFS - addressed in versions 9.4.0.18, 9.7.1.0
Storage Protect Plus Server - update to 10.1.16.1
EMC Cloud Tiering Appliance - update to 13.2.0.2.29

• https://www.sudo.ws/releases/changelog/
• https://www.openwall.com/lists/oss-security/2023/12/21/9
• https://github.com/sudo-project/sudo/commit/7873f8334c8d31031f8cfa83bd97ac6029309e4f
• https://arxiv.org/abs/2309.02545
• https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_15
• https://security.gentoo.org/glsa/202401-29

• Privilege escalation in Sudo
• Gentoo update for sudo
• Fedora 40 update for sudo
• Fedora 39 update for sudo
• Fedora 38 update for sudo
• Amazon Linux AMI update for sudo
• Red Hat Enterprise Linux update for sudo
• SUSE update for sudo
• SUSE update for sudo
• SUSE update for sudo
• SUSE update for sudo
• SUSE update for sudo
• SUSE update for sudo
• SUSE update for sudo
• SUSE update for sudo
• openEuler update for sudo
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.15
• Multiple vulnerabilities in IBM Storage Protect Plus Server
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell PowerScale OneFS
• Multiple vulnerabilities in Juniper Secure Analytics (JSA)
• Multiple vulnerabilities in Red Hat Ceph Storage 5
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Data Protection Central
• Amazon Linux AMI update for sudo
• Improper authentication in IBM Storage Ceph
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for Sudo Project Sudo
• Multiple vulnerabilities in Dell PowerStore X
• Multiple vulnerabilities in Dell PowerStore T Family
• Anolis OS update for sudo
• Anolis OS update for sudo
• Meinberg LANTIME firmware update for third-party components (January 2024)
• Multiple vulnerabilities in IBM Integrated Analytics System