[ GLSA 202107-11 ] OpenDoas

[GLSA]

Gentoo Linux Security Advisory

Title: OpenDoas: Insufficient environment filtering (GLSA 202107-11)
Severity: normal
Exploitable: local
Date: 2021-07-07
Bug(s): #767781
ID: 202107-11

Synopsis

A vulnerability in OpenDoas could lead to privilege escalation.

Background

OpenDoas allows users to run commands as other users.

Affected Packages

Package: app-admin/doas
Vulnerable: < 6.8.1
Unaffected: >= 6.8.1
Architectures: All supported architectures


Description

OpenDoas does not properly filter the PATH variable from the resulting
shell after escalating privileges.


Impact

A local attacker with control of a user’s PATH variable could escalate
privileges if that user uses OpenDoas with a poisoned PATH variable.


Workaround

There is no known workaround at this time.

Resolution

All OpenDoas users should upgrade to the latest version: