OpenDoas: Insufficient environment filtering — GLSA 202107-11

A vulnerability in OpenDoas could lead to privilege escalation.

Affected packages

Background

OpenDoas allows users to run commands as other users.

Description

OpenDoas does not properly filter the PATH variable from the resulting shell after escalating privileges.

Impact

A local attacker with control of a user’s PATH variable could escalate privileges if that user uses OpenDoas with a poisoned PATH variable.

Workaround

There is no known workaround at this time.

Resolution

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-admin/doas-6.8.1"
 

References

• CVE-2019-25016

Release date
July 07, 2021

Latest revision
July 07, 2021: 1

Severity
normal

Exploitable
local

Bugzilla entries

• 767781