How to update sudo packages manually to fix the vulnerability Sudo Flaw Lets Linux Users Run Commands As Root Even When They’re Restricted?

How to update sudo packages manually to fix the vulnerability Sudo Flaw Lets Linux Users Run Commands As Root Even When They’re Restricted?

First, check the version by typing the command

sudo -V

Sudo version 1.8.21p2

Sudoers policy plugin version 1.8.21p2

Sudoers file grammar version 46

Sudoers I/O plugin version

1.8.21p2

Let’s download the sudo packages from the repository manually. We can use either wget or curl -O

Copy the exact sudo package from the binary package list based upon the architecture.

https://www.sudo.ws/sudo/dist/packages/Ubuntu/18.04/sudo_1.8.28-1_ubu1804_amd64.deb

I have chosen 64-bit architecture as 32-bit architecture is not supported, anymore.

krishna@omvapt:~$ wget https://www.sudo.ws/sudo/dist/packages/Ubuntu/18.04/sudo_1.8.28-1_ubu1804_amd64.deb

–2019-10-15 01:18:13–  https://www.sudo.ws/sudo/dist/packages/Ubuntu/18.04/sudo_1.8.28-1_ubu1804_amd64.deb

Resolving www.sudo.ws (www.sudo.ws)… 65.102.237.118

Connecting to www.sudo.ws (www.sudo.ws)|65.102.237.118|:443… connected.

HTTP request sent, awaiting response… 200 OK

Length: 1417300 (1.4M) [application/octet-stream]

Saving to: ‘sudo_1.8.28-1_ubu1804_amd64.deb’

sudo_1.8.28-1_ubu 100%[==========>]   1.35M   451KB/s    in 3.1s    

2019-10-15 01:18:19 (451 KB/s) – ‘sudo_1.8.28-1_ubu1804_amd64.deb’ saved [1417300/14

17300]

Once it is downloaded, ensure it is present in the same directory for easy installation in the next following commands.

We also need to install gdebi to fetch the missing dependencies.

We are all set and now let’s upgrade the sudo package to remediate or fix the vulnerability of Linux privilege escalation for unauthorized users.

Finally, we have updated the sudo package from 1.8.21 to 1.8.28 by remediating the high severity vulnerability which is yet to be released/updated in the CVE database.

Although, CVE number has been assigned CVE-2019-14287. No information has been updated in the CVE details. As Ethical Hackers, we are not dependent entirely on CVE databases but also use our experience and skills to stay ahead of the curve. 

Know more about the vulnerability in this link #Sudo #Flaw Lets #Linux Users #Run Commands As #Root Even When They’re #Restricted http://ow.ly/Q6Z650wLa6o