CyberSecBulletin

Opendoas Project vulnerabilities

We track 1 vulnerability in Opendoas Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 14, 2023.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Opendoas Project vulnerabilities

  • 8.8 High severity

    Opendoas: Improper Privilege Management

    CVE-2023-28339Opendoas Project

    OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later.