PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2015-8239

CVE-2015-8239

sudo: Race condition when checking digests in sudoers

Loading…

Severity

Moderate

Red Hat Product Security

6

CVSS 2.0

Review impact separately from score.

Published · November 9, 2015

Updated · May 13, 2026

Description

The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 6
AV:L/AC:H/Au:S/C:C/I:C/A:C

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition