7.4
High
CVE-2026-35535 In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop…
Description
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sudo | Versions not published | |
| RUGGEDCOM RST2428P 4.0 | earliest → < 4.0 | 4.0 |
| Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) | Versions not published | |
| Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) | Versions not published | |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions not published | |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions not published | |
| Red Hat OpenShift Container Platform 4.12 412.86 | earliest → < 412.86.202605271418-0 | 412.86.202605271418-0 |
| Red Hat OpenShift Container Platform 4.13 413.92 | earliest → < 413.92.202605271328-0 | 413.92.202605271328-0 |
| Red Hat OpenShift Container Platform 4.15 415.92 | earliest → < 415.92.202606030318-0 | 415.92.202606030318-0 |
Show the 42 other branches Hide the 42 other branches
References
- github.com github.com
- www.qualys.com www.qualys.com
- bugs.launchpad.net bugs.launchpad.net
- bugs.debian.org bugs.debian.org
Timeline
- Published
- Last modified