CVE-2014-9680

sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 LOW
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Affected Products (NVD)
VendorProductVersion
sudo_projectsudo
𝑥
≤ 1.8.11
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
sudo
bookworm
1.9.13p3-1+deb12u1
fixed
bullseye
1.9.5p2-3+deb11u1
fixed
bullseye (security)
1.9.5p2-3+deb11u1
fixed
sid
1.9.16-2
fixed
trixie
1.9.16-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
sudo
lucid
Fixed 1.7.2p1-1ubuntu5.8
released
precise
Fixed 1.8.3p1-1ubuntu3.7
released
trusty
Fixed 1.8.9p5-1ubuntu1.1
released
utopic
Fixed 1.8.9p5-1ubuntu2.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
sudo
suse enterprise desktop 15
1.8.22-2.11
fixed
suse enterprise desktop 15 SP1
1.8.22-4.3.3
fixed
suse enterprise desktop 15 SP2
1.8.22-4.9.1
fixed
suse enterprise desktop 15 SP4
1.9.9-150400.2.5
fixed
suse enterprise sap 15
1.8.22-2.11
fixed
suse enterprise sap 15 SP1
1.8.22-4.3.3
fixed
suse enterprise sap 15 SP2
1.8.22-4.9.1
fixed
suse enterprise sap 15 SP4
1.9.9-150400.2.5
fixed
suse enterprise server 15
1.8.22-2.11
fixed
suse enterprise server 15 SP1
1.8.22-4.3.3
fixed
suse enterprise server 15 SP2
1.8.22-4.9.1
fixed
suse enterprise server 15 SP4
1.9.9-150400.2.5
fixed
sudo-devel
suse enterprise desktop 15
1.8.22-2.11
fixed
suse enterprise desktop 15 SP1
1.8.22-4.3.3
fixed
suse enterprise desktop 15 SP2
1.8.22-4.9.1
fixed
suse enterprise desktop 15 SP4
1.9.9-150400.2.5
fixed
suse enterprise sap 15
1.8.22-2.11
fixed
suse enterprise sap 15 SP1
1.8.22-4.3.3
fixed
suse enterprise sap 15 SP2
1.8.22-4.9.1
fixed
suse enterprise sap 15 SP4
1.9.9-150400.2.5
fixed
suse enterprise server 15
1.8.22-2.11
fixed
suse enterprise server 15 SP1
1.8.22-4.3.3
fixed
suse enterprise server 15 SP2
1.8.22-4.9.1
fixed
suse enterprise server 15 SP4
1.9.9-150400.2.5
fixed
sudo-plugin-python
suse enterprise desktop 15 SP4
1.9.9-150400.2.5
fixed
suse enterprise sap 15 SP4
1.9.9-150400.2.5
fixed
suse enterprise server 15 SP4
1.9.9-150400.2.5
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
sudo
RHEL 6
0:1.8.6p3-19.el6
fixed
RHEL 7
0:1.8.6p7-16.el7
fixed
sudo-devel
RHEL 6
0:1.8.6p3-19.el6
fixed
RHEL 7
0:1.8.6p7-16.el7
fixed
Common Weakness Enumeration
References
http://openwall.com/lists/oss-security/2014/10/15/24
http://rhn.redhat.com/errata/RHSA-2015-1409.html
http://www.securitytracker.com/id/1033158
http://www.sudo.ws/alerts/tz.html
https://security.gentoo.org/glsa/201504-02
http://openwall.com/lists/oss-security/2014/10/15/24
http://rhn.redhat.com/errata/RHSA-2015-1409.html
http://www.securitytracker.com/id/1033158
http://www.sudo.ws/alerts/tz.html
https://security.gentoo.org/glsa/201504-02