CVE-2019-18634: Buffer Overflow
Apple macOS Catalina is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the privileged sudo process. By sending an overly long string to the stdin of getln() in tgetpass.c., a local attacker could overflow a buffer and execute arbitrary code on the system.
Other sources
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.
— MITRE
In Sudo before 1.8.31, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.
Upstream patch:
https://github.com/sudo-project/sudo/commit/fa8ffeb17523494f0e8bb49a25e53635f4509078
References:
https://www.sudo.ws/alerts/pwfeedback.html https://www.openwall.com/lists/oss-security/2020/01/30/6
— Red Hat
sudo. A buffer overflow issue was addressed with improved memory handling.
Credit
Affected Software
Remediation
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2020-3877
- CVE-2019-11043
- CVE-2020-3857
- CVE-2020-3866
- CVE-2020-3848
- CVE-2020-3849
- CVE-2020-3850
- CVE-2020-3847
- CVE-2020-3835
- CVE-2020-3863
- CVE-2020-9774
- CVE-2020-3827
- CVE-2020-3826
- CVE-2020-3870
- CVE-2020-3878
- CVE-2020-3880
- CVE-2020-3845
- CVE-2020-3837
- CVE-2020-3851
- CVE-2020-3840
- CVE-2020-3875
- CVE-2020-3872
- CVE-2020-3853
- CVE-2020-3836
- CVE-2020-3842
- CVE-2020-3871
- CVE-2020-3846
- CVE-2020-3856
- CVE-2020-3829
- CVE-2020-3830
- CVE-2020-3854
- CVE-2019-18634
- CVE-2020-3855
- CVE-2020-3839
- CVE-2020-3843
- CVE-2020-3838
Frequently Asked Questions
What is CVE-2019-18634?
CVE-2019-18634 is a vulnerability in sudo that allows for a buffer overflow attack due to memory handling issues.
What software is affected by CVE-2019-18634?
CVE-2019-18634 affects macOS Catalina (up to version 10.15.3), Mojave, and High Sierra.
How can I fix CVE-2019-18634?
To fix CVE-2019-18634, update your Apple macOS to version 10.15.3 or install the latest security updates for Mojave or High Sierra.
What is the severity of CVE-2019-18634?
The severity of CVE-2019-18634 is not specified in the description.
Where can I find more information about CVE-2019-18634?
More information about CVE-2019-18634 can be found at the following reference: [https://support.apple.com/en-us/HT210919](https://support.apple.com/en-us/HT210919)