SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

Vulnerability in main/doas affecting all releases (CVE-2019-25016)

ID: oval:org.secpod.oval:def:1801827	Date: (C)2021-03-15 (M)2022-04-27
Class: PATCH	Family: unix

There is an unsafe incomplete reset of PATH in OpenDoas 6.6 through 6.8 when changing the user context.

Platform:

Alpine Linux 3.10

Alpine Linux 3.11

Alpine Linux 3.12

Alpine Linux 3.13

Product:

doas

Reference:

12366