Situation
A buffer overflow was found in Sudo that allows a low privileged user to execute commands as root without authentication. This is due to a bug in the “pwfeedback” option. By default, “pwfeedback” is not enabled but there are some Linux distros that do have it enabled by default.
Problem
This allows attackers to easily perform privilege escalation on Linux or MacOS machines.
Implication
An attacker who is able to access any Linux or MacOS machine can run any command as root.
Need
The maintainers of Sudo have released a patch, 1.8.31, that addresses this issue. Apple has also released a patch for High Sierra 10.13.6, Mojave 10.14.6, and Catalina 10.15.2.
Learn More
https://thehackernews.com/2020/02/sudo-linux-vulnerability.html https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18634
