CVE-2019-15900

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum(3), sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The result was that, instead of reporting that the supplied username or group name did not exist, it would execute the command as root.

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. On platforms without strtonum(3), sscanf was used without checking for error cases. Instead, the uninitialized variable errstr was checked and in some cases returned success even if sscanf failed. The result was that, instead of reporting that the supplied username or group name did not exist, it would execute the command as root.

Se detectó un problema en slicer69 doas versiones anteriores a 6.2 en determinadas plataformas diferentes de OpenBSD. En plataformas sin strtonum(3), se utilizó sscanf sin comprobar los casos de error. En cambio, la variable no inicializada errstr fue comprobada y en algunos casos se devolvió con éxito incluso si sscanf fallaba. El resultado fue que, en vez de reportar que el nombre de usuario o nombre de grupo suministrado no existía, ejecutaría el comando como root.