suse · CVE-2023-28486

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2023-28486 severity moderate: SUSE including 272 source package names (1.10.1.16.4.5.392:sudo-1.9.5p2-150300.3.24.1, 11.1-2.2.365:sudo-1.9.5p2-150300.3.24.1, …), 465 product×package rows across 186 product lines (Container ses/7.1/cephcsi/cephcsi, Container ses/7.1/rook/ceph, … (186 product lines)): Fixed 318, Known Affected 142, Known Not Affected 3, Will Not Fix 2.

Description:

Sudo before 1.9.13 does not escape control characters in log messages.