alpine · CVE-2023-42465

Quick triage

Priority: not assigned Published: Updated:

View at Official alpine advisory, NVD, CVE.org · CVE detail

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2023-42465: 1 source package rows (sudo); 18 state rows across 3 repos (3.22-community, edge-community, edge-main); fixed 0, open 18.

Description:

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

cvelogic Threat Intelligence