diff --git a/cve/sudo/2023/CVE-2023-26604/README.md b/cve/sudo/2023/CVE-2023-26604/README.md new file mode 100644 index 0000000000000000000000000000000000000000..1433f4938094c5c96d8afb6d9b89cc9682cc3379 --- /dev/null +++ b/cve/sudo/2023/CVE-2023-26604/README.md @@ -0,0 +1,2 @@ +# CVE-2023-26604 +Checker for CVE-2023-26604 \ No newline at end of file diff --git a/cve/sudo/2023/CVE-2023-26604/checker.sh b/cve/sudo/2023/CVE-2023-26604/checker.sh new file mode 100644 index 0000000000000000000000000000000000000000..3b1feecc7c4098844defc8e162949b42c2591a2e --- /dev/null +++ b/cve/sudo/2023/CVE-2023-26604/checker.sh @@ -0,0 +1,9 @@ +#!/bin/sh + +version=$(systemd --version | awk -F " " '{print $2}'| awk -F "+" '{print $1}') + +if (($version < "247")) then + echo 'Vulnerable' +else + echo 'Not vulnerable' +fi diff --git a/cve/sudo/2023/yaml/CVE-2023-26604.yaml b/cve/sudo/2023/yaml/CVE-2023-26604.yaml new file mode 100644 index 0000000000000000000000000000000000000000..6b534f5929bf2fde5b7209ce8dbca99284b83299 --- /dev/null +++ b/cve/sudo/2023/yaml/CVE-2023-26604.yaml @@ -0,0 +1,20 @@ +id: CVE-2023-26604 +source: https://github.com/Zenmovie/CVE-2023-26604 +info: + name: Sudo 是一个用于类 Unix 计算机操作系统的程序,它能够使用户能够以另一个用户(默认是超级用户)的安全权限运行程序。sudoedit 功能用于以另外一个用户身份编辑文件。 + severity: high + description: + 在247之前的systemd不能充分阻止某些Sudo配置的本地特权升级,例如,可能会在其中执行“systemctl status”命令的sudoers文件。具体来说,systemd没有将LESSSECURE设置为1,因此其他程序可能会从less程序启动。当从Sudo运行systemctl时,这会带来很大的安全风险,因为当终端大小太小而无法显示完整的systemctl输出时,less会作为root执行。 + scope-of-influence: + systemd before 247 + references: + - https://nvd.nist.gov/vuln/detail/cve-2023-26604 + classification: + cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H + cvss-score: 7.8 + cve-id: CVE-2023-26604 + cwe-id: NVD-CWE-noinfo + cnvd-id: None + kve-id: None + tags: + - systemd, systemctl status \ No newline at end of file diff --git a/openkylin_list.yaml b/openkylin_list.yaml index 7128c8a654f0511f8b057f1d715266e718f048c2..33b4c94e67e0079c2be4e36697bd1a1729deed13 100644 --- a/openkylin_list.yaml +++ b/openkylin_list.yaml @@ -75,6 +75,7 @@ cve: - CVE-2019-18634 - CVE-2021-3156 - CVE-2023-22809 + - CVE-2023-26604 gitlab: - CVE-2020-10977 - CVE-2021-22205