Use-after-free vulnerability in remctld before 3.14 allows for arbitrary command execution

Use-after-free vulnerability in remctld before 3.14 allows for arbitrary command execution

CVE-2018-0493 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to a daemon crash, memory corruption, or arbitrary command execution.

Learn more about our Web Application Penetration Testing UK.