Hacker News new | ask | show | jobs
by Galicarnax 1143 days ago
Are there real-life examples where "traditional non-safe" sudo/su lead to problems?
1 comments
mustache_kimono 1143 days ago
Plenty. See: https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sudo

Double free, just this year: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2732...

Use after free: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0493

Recent buffer overflows: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3156, https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1863...

Buffer over-read: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4399...

link