Critical Vulnerability Patched in ‘sudo’ Utility for Unix-Like OSes

A bug in the program that gives unauthenticated local users a way to gain root privileges on a host system. US Cyber Command (USCYBERCOM) tweeted: “This is a far more dangerous #Sudo vulnerability than seen in the recent past” The bug was first introduced in July 2011 and impacts all versions of the utility from 1.8.2 to 1.9.5p2. An attacker would need local access to a vulnerable system in order to exploit the flaw.”]

Source: https://www.darkreading.com/application-security/critical-vulnerability-patched-in-sudo-utility-for-unix-like-oses