Hacker News Reader

> sudo was bitten by this back in the day (CVE-2017-1000367):

> https://www.openwall.com/lists/oss-security/2017/05/30/16

https://www.openwall.com/lists/oss-security/2022/12/22/5

> This allows any sudoers user to obtain full root privileges

The way most sudoers files are set up, if you're in the wheel or sudo group, you're only a "sudo -i" from a root command prompt, so I'm not sure I see why this is a vulnerability. Can anyone elaborate?

Reply on news.ycombinator.com