已关闭
CVE-2026-96512 #91
m0_74032979创建于 21 天前关闭于 11 天前
openeuler-ci-bot21 天前 将 zhengzongmin、licihua、dillon_chen、overweight、zhujianwei001、xujing99、shenyangyang 设为负责人
21 天前 将 zhengzongmin、licihua、dillon_chen、overweight、zhujianwei001、xujing99、shenyangyang 设为负责人
21 天前 修改了issue 的描述
openeuler-ci-bot21 天前 将 qq_28851361 设为负责人，移除负责人 zhengzongmin、licihua、dillon_chen、overweight、zhujianwei001、xujing99、shenyangyang
21 天前 将 qq_28851361 设为负责人，移除负责人 zhengzongmin、licihua、dillon_chen、overweight、zhujianwei001、xujing99、shenyangyang
21 天前 添加了label：sig/Base-service
openeuler-ci-bot
21 天前 评论：
21 天前 评论：
Welcome To openEuler Community
Hey @zhengzongmin , thanks for your contribution to the community.
Bot Usage Manual
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands. You can self-configure the PR merge rules for this repository. For more details, please refer to Here.
Contact Guide
If you have any questions, please contact the SIG: Base-service ,
and any of the maintainers: @dillon_chen, @licihua, @overweight, @shenyangyang, @xujing99, @zhujianwei001 ,
and any of the committers: @houmingyong, @jiayi0118, @qq_28851361 .
此处折叠了42条消息 查看更多
openeuler-ci-bot
11 天前 评论：
11 天前 评论：
经过cve-manager解析，(所有PR均已合入)
11 天前 删除了label：CVE/UNFIXED
11 天前 添加了label：CVE/FIXED
4 天前 关联了pull request：[sync] PR-224: fix: CVE-2026-96512 - master
4 天前 关联了pull request：[sync] PR-223: fix: CVE-2026-96512 - openEuler-24.03-LTS-SP3
一、漏洞信息
漏洞编号：CVE-2026-96512
漏洞归属组件：sudo
漏洞归属的版本：1.9.12p2,1.9.14p1,1.9.15p5,1.9.16p2,1.9.17p2,1.9.2,1.9.5p2,1.9.8p2
CVSS评分：
BaseScore：7.8 High
Vector：CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞简述：
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing Z timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an unprivileged local user can set TZ to an extreme timezone offset to shift the authorization window by up to approximately 25 hours, causing expired rules to be treated as valid. This allows the user to execute commands outside the intended time window. Authentication is not bypassed; only the time-based authorization check is affected.
漏洞公开时间：2026-09-23 22:17:10
漏洞创建时间：2026-09-29 12:08:08
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2026-96512
更多参考(点击展开)
漏洞分析指导链接：
https://atomgit.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
七彩瞬析开源风险感知平台
漏洞补丁信息：
详情(点击展开)
二、漏洞分析结构反馈
影响性分析说明：
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing Z timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an unprivileged local user can set TZ to an extreme timezone offset to shift the authorization window by up to approximately 25 hours, causing expired rules to be treated as valid. This allows the user to execute commands outside the intended time window. Authentication is not bypassed; only the time-based authorization check is affected.
openEuler评分：
7.8
Vector：CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
受影响版本排查(受影响/不受影响)：
1.master(1.9.17p2):受影响
2.openEuler-20.03-LTS-SP4(1.9.2):受影响
3.openEuler-22.03-LTS-SP4(1.9.8p2):受影响
4.openEuler-24.03-LTS-Next(1.9.15p5):受影响
5.openEuler-24.03-LTS-SP1(1.9.15p5):受影响
6.openEuler-24.03-LTS-SP3(1.9.15p5):受影响
7.openEuler-24.03-LTS-SP4(1.9.15p5):受影响
修复是否涉及abi变化(是/否)：
1.master(1.9.17p2):否
2.openEuler-20.03-LTS-SP4(1.9.2):否
3.openEuler-22.03-LTS-SP4(1.9.8p2):否
4.openEuler-24.03-LTS-Next(1.9.15p5):否
5.openEuler-24.03-LTS-SP1(1.9.15p5):否
6.openEuler-24.03-LTS-SP3(1.9.15p5):否
7.openEuler-24.03-LTS-SP4(1.9.15p5):否
原因说明：
1.master(1.9.17p2):正常修复
2.openEuler-20.03-LTS-SP4(1.9.2):正常修复
3.openEuler-22.03-LTS-SP4(1.9.8p2):正常修复
4.openEuler-24.03-LTS-Next(1.9.15p5):正常修复
5.openEuler-24.03-LTS-SP1(1.9.15p5):正常修复
6.openEuler-24.03-LTS-SP3(1.9.15p5):正常修复
7.openEuler-24.03-LTS-SP4(1.9.15p5):正常修复