doas Project doas 6.0 Patch 1

CPE Details

doas Project doas 6.0 Patch 1
doas_project
doas
6.0
2019-10-28
17h16 +00:00
2019-10-28
17h16 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:doas_project:doas:6.0:p1:*:*:*:*:*:*

Informations

Vendor

doas_project

Product

doas

Version

6.0

Update

p1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-15901 2019-10-18 13h44 +00:00 An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext(3) call with flags to change the UID, primary GID, and secondary GIDs was replaced (on certain platforms: Linux and possibly NetBSD) with a single setuid(2) call. This resulted in neither changing the group id nor initializing secondary group ids.
8.8
High
CVE-2019-15900 2019-10-18 13h41 +00:00 An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum(3), sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The result was that, instead of reporting that the supplied username or group name did not exist, it would execute the command as root.
9.8
Critical