CVE-2023-7090
Fixed in a distro release EPSS <1%CVSS 6.6
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them.
Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | sudo | 1.8.27-1+deb10u6 |
| Debian 12 | sudo | 1.8.28p1-1 |
| Debian 13 | sudo | 1.8.28p1-1 |
| Debian 14 | sudo | 1.8.28p1-1 |
| Ubuntu 20.04 LTS | sudo | 1.8.31-1ubuntu1.5 |
| Ubuntu 22.04 LTS | sudo | 1.9.9-1ubuntu2.4 |