An issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration for Vagrant on Linux is insecure. If the host has been configured according to this documentation, non-privileged users on the host can leverage a wildcard in the sudoers configuration to execute arbitrary commands as root.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vagrant | Hashicorp | * | 2.3.1 (excluding) |
| Vagrant | Ubuntu | bionic | * |
| Vagrant | Ubuntu | focal | * |
| Vagrant | Ubuntu | kinetic | * |
| Vagrant | Ubuntu | lunar | * |
| Vagrant | Ubuntu | mantic | * |
| Vagrant | Ubuntu | trusty | * |
| Vagrant | Ubuntu | xenial | * |
References
- https://discuss.hashicorp.com/t/hcsec-2022-23-vagrant-nfs-sudoers-configuration-allows-for-local-privilege-escalation/45423
- https://github.com/hashicorp/vagrant/pull/12910
- https://www.vagrantup.com/docs/synced-folders/nfs
- https://discuss.hashicorp.com/t/hcsec-2022-23-vagrant-nfs-sudoers-configuration-allows-for-local-privilege-escalation/45423
- https://github.com/hashicorp/vagrant/pull/12910
- https://www.vagrantup.com/docs/synced-folders/nfs