CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages.
5.3 MediumFix available
Sudo before 1.9.13 does not escape control characters in log messages.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
0.92%Up 0.9 points since Mar 16, 2023
What each source reports
NVD Score used
Sudo before 1.9.13 does not escape control characters in log messages.
- Record
CVE-2023-28486- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-116
- Updated
- 2026-11-02
CVE List No score
Sudo before 1.9.13 does not escape control characters in log messages.
- Record
CVE-2023-28486- Updated
- 2026-11-02
EUVDEUVD-2023-32156 No score
Sudo before 1.9.13 does not escape control characters in log messages.
- Record
EUVD-2023-32156- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pr34-r4f9-f5c6
Sudo before 1.9.13 does not escape control characters in log messages.
Sudo before 1.9.13 does not escape control characters in log messages.
- Record
GHSA-pr34-r4f9-f5c6- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-116
- Updated
- 2026-11-02
OSVBELL-CVE-2023-28486
- Record
BELL-CVE-2023-28486- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages.
- Record
DEBIAN-CVE-2023-28486- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
Show 22 moreShow less
OSVOESA-2023-1205
sudo security update
Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.
Security Fix(es):
Sudo before 1.9.13 does not escape control characters in sudoreplay output.(CVE-2023-28487)
Sudo before 1.9.13 does not escape control characters in log messages.(CVE-2023-28486)
- Record
OESA-2023-1205- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2024:0811
Red Hat Security Advisory: sudo security update
- Record
RHSA-2024:0811- CVSS 3.1
- 7.0 High
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-28486
Sudo before 1.9.13 does not escape control characters in log messages.
- Record
UBUNTU-CVE-2023-28486- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVALSA-2024:0811 No score
Moderate: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Bug Fix(es) and Enhancement(s):
- CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
- CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
- CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
- Record
ALSA-2024:0811- Updated
- 2026-11-02
OSVCLSA-2023-1689258488 No score
Fix CVE(s): CVE-2023-28486, CVE-2023-2848, CVE-2023-28487
- SECURITY UPDATE: control characters are not escaped
- debian/patches/CVE-2023-2848x.patch: escape control chars
- CVE-2023-28486
- CVE-2023-28487
- Record
CLSA-2023-1689258488- Updated
- 2026-11-02
OSVCLSA-2024-1711476502 No score
sudo: Fix of 2 CVEs
- CVE-2023-28486: Escape control characters in log messages
- CVE-2023-28487: Escape control characters in sudoreplay output
- Record
CLSA-2024-1711476502- Updated
- 2026-11-02
OSVCLSA-2024-1719919908 No score
sudo: Fix of 2 CVEs
- CVE-2023-28486: escape control characters in log messages
- CVE-2023-28487: escape control characters in sudoreplay output
- Record
CLSA-2024-1719919908- Updated
- 2026-11-02
OSVCLSA-2024-1719920793 No score
sudo: Fix of 2 CVEs
- CVE-2023-28486: escape control characters in log messages
- CVE-2023-28487: escape control characters in sudoreplay output
- Record
CLSA-2024-1719920793- Updated
- 2026-11-02
OSVCLSA-2026-1777377545 No score
sudo: Fix of 3 CVEs
- CVE-2021-23239: fix potential directory existence info leak in sudoedit
- CVE-2023-28486: escape control characters in log messages
- CVE-2023-28487: escape control characters in sudoreplay output
- Record
CLSA-2026-1777377545- Updated
- 2026-11-02
OSVCLSA-2026-1777378006 No score
sudo: Fix of 3 CVEs
- CVE-2021-23239: fix potential directory existence info leak in sudoedit
- CVE-2023-28486: escape control characters in log messages
- CVE-2023-28487: escape control characters in sudoreplay output
- Record
CLSA-2026-1777378006- Updated
- 2026-11-02
OSVCLSA-2026-1790600964 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790600964- Updated
- 2026-11-02
OSVCLSA-2026-1790601456 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790601456- Updated
- 2026-11-02
OSVCLSA-2026-1790606589 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790606589- Updated
- 2026-11-02
OSV No score
Sudo before 1.9.13 does not escape control characters in log messages.
- Record
CVE-2023-28486- Updated
- 2026-11-02
OSVMGASA-2023-0133 No score
Updated sudo packages fix security vulnerability
Sudo before 1.9.13 does not escape control characters in log messages. (CVE-2023-28486) Sudo before 1.9.13 does not escape control characters in sudoreplay output. (CVE-2023-28487)
- Record
MGASA-2023-0133- Updated
- 2026-11-02
OSVSUSE-SU-2023:1659-1 No score
Security update for sudo
This update for sudo fixes the following issue:
Security fixes:
- CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362).
- CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361).
Other fixes:
- Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483).
- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
- Record
SUSE-SU-2023:1659-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1665-1 No score
Security update for sudo
This update for sudo fixes the following issue:
Security issues:
- CVE-2023-28486: Fixed sudo does not escape control characters in log messages. (bsc#1209362)
- CVE-2023-28487: Fixed sudo does not escape control characters in sudoreplay output. (bsc#1209361)
- CVE-2023-27320: Fixed a potential security issue with a double free with per-command chroot sudoers rules (bsc#1208595).
Bug fixes:
- Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483)
- If NOPASSWD is specified, don't ask for password if command is not found (bsc#1206772).
- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
- Record
SUSE-SU-2023:1665-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1698-1 No score
Security update for sudo
This update for sudo fixes the following issue:
Security fixes:
- CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362).
- CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361).
Other fixes:
- Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483).
- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
- Record
SUSE-SU-2023:1698-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1699-1 No score
Security update for sudo
This update for sudo fixes the following issue:
Security fixes:
- CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362).
- CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361).
Other fixes:
- Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483).
- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
- Record
SUSE-SU-2023:1699-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1700-1 No score
Security update for sudo
This update for sudo fixes the following issues:
- CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362).
- CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361).
- Record
SUSE-SU-2023:1700-1- Updated
- 2026-11-02
OSVUSN-6005-1 No score
sudo vulnerabilities
Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly escaped control characters in log messages and sudoreplay output. An attacker could possibly use these issues to inject terminal control characters that alter output when being viewed.
- Record
USN-6005-1- Updated
- 2026-11-02
OSVUSN-6005-2 No score
sudo vulnerabilities
USN-6005-1 fixed vulnerabilities in Sudo. This update provides the corresponding updates for Ubuntu 16.04 LTS.
Original advisory details:
Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly escaped control characters in log messages and sudoreplay output. An attacker could possibly use these issues to inject terminal control characters that alter output when being viewed.
- Record
USN-6005-2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.9.5p2-10.el9_3 | 1.9.5p2-10.el9_3 |
sudo-python-pluginAlmaLinux:9 From an advisory covering 3 CVEs |
before 1.9.5p2-10.el9_3 | 1.9.5p2-10.el9_3 |
sudoAlpaquita:23 |
1.9.12_p1-r1 up to 1.9.15_p5-r0 | 1.9.15_p5-r0 |
sudoTuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs |
before 1.8.16-0ubuntu1.11+tuxcare.els2 | 1.8.16-0ubuntu1.11+tuxcare.els2 |
sudo-ldapTuxCare:Ubuntu:16.04 From an advisory covering 3 CVEs |
before 1.8.16-0ubuntu1.11+tuxcare.els2 | 1.8.16-0ubuntu1.11+tuxcare.els2 |
sudoTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 1.9.5p2-9.el9.tuxcare.els2 | 1.9.5p2-9.el9.tuxcare.els2 |
sudo-develTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 1.9.5p2-9.el9.tuxcare.els2 | 1.9.5p2-9.el9.tuxcare.els2 |
sudo-python-pluginTuxCare:AlmaLinux:9.2 From an advisory covering 2 CVEs |
before 1.9.5p2-9.el9.tuxcare.els2 | 1.9.5p2-9.el9.tuxcare.els2 |
sudoTuxCare:CentOS:8.4 From an advisory covering 2 CVEs |
before 1.8.29-7.el8_4.1.tuxcare.els3 | 1.8.29-7.el8_4.1.tuxcare.els3 |
sudo-develTuxCare:CentOS:8.4 From an advisory covering 2 CVEs |
before 1.8.29-7.el8_4.1.tuxcare.els3 | 1.8.29-7.el8_4.1.tuxcare.els3 |
Show 94 moreShow less
| Package | Affected | Fixed |
|---|---|---|
sudoTuxCare:CentOS:8.5 From an advisory covering 2 CVEs |
before 1.8.29-7.el8_4.1.tuxcare.els3 | 1.8.29-7.el8_4.1.tuxcare.els3 |
sudo-develTuxCare:CentOS:8.5 From an advisory covering 2 CVEs |
before 1.8.29-7.el8_4.1.tuxcare.els3 | 1.8.29-7.el8_4.1.tuxcare.els3 |
sudoTuxCare:OracleLinux:7 From an advisory covering 3 CVEs |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els2 | 1.8.23-10.0.1.el7_9.3.tuxcare.els2 |
sudo-develTuxCare:OracleLinux:7 From an advisory covering 3 CVEs |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els2 | 1.8.23-10.0.1.el7_9.3.tuxcare.els2 |
sudoTuxCare:RHEL:7 From an advisory covering 3 CVEs |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els2 | 1.8.23-10.0.1.el7_9.3.tuxcare.els2 |
sudo-develTuxCare:RHEL:7 From an advisory covering 3 CVEs |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els2 | 1.8.23-10.0.1.el7_9.3.tuxcare.els2 |
sudoTuxCare:RHEL:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:RHEL:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoTuxCare:OracleLinux:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:OracleLinux:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoTuxCare:CentOS:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:CentOS:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoDebian:12 |
before 1.9.13p1-1 | 1.9.13p1-1 |
sudoDebian:13 |
before 1.9.13p1-1 | 1.9.13p1-1 |
sudoDebian:14 |
before 1.9.13p1-1 | 1.9.13p1-1 |
sudoDebian:10 From an advisory covering 3 CVEs |
before 1.8.27-1+deb10u6, plus listed versions 1.8.27-11.8.27-1+deb10u11.8.27-1+deb10u21.8.27-1+deb10u31.8.27-1+deb10u41.8.27-1+deb10u5 |
1.8.27-1+deb10u6 |
sudoDebian:11 From an advisory covering 2 CVEs |
before 1.9.5p2-3+deb11u3, plus listed versions 1.9.5p2-31.9.5p2-3+deb11u11.9.5p2-3+deb11u2 |
1.9.5p2-3+deb11u3 |
sudoMageia:8 From an advisory covering 2 CVEs |
before 1.9.5p2-2.3.mga8 | 1.9.5p2-2.3.mga8 |
sudoopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 1.9.2-11.oe1 | 1.9.2-11.oe1 |
sudoopenEuler:20.03-LTS-SP3 From an advisory covering 2 CVEs |
before 1.9.2-11.oe1 | 1.9.2-11.oe1 |
sudoopenEuler:22.03-LTS From an advisory covering 2 CVEs |
before 1.9.8p2-11.oe2203sp1 | 1.9.8p2-11.oe2203sp1 |
sudoopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 1.9.8p2-11.oe2203sp1 | 1.9.8p2-11.oe2203sp1 |
sudo-debuginfoRed Hat:rhel_eus:9.0::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-7.el9_0.4 | 0:1.9.5p2-7.el9_0.4 |
sudo-debugsourceRed Hat:rhel_eus:9.0::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-7.el9_0.4 | 0:1.9.5p2-7.el9_0.4 |
sudo-python-pluginRed Hat:rhel_eus:9.0::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-7.el9_0.4 | 0:1.9.5p2-7.el9_0.4 |
sudo-python-plugin-debuginfoRed Hat:rhel_eus:9.0::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-7.el9_0.4 | 0:1.9.5p2-7.el9_0.4 |
sudo-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-9.el9_2.2 | 0:1.9.5p2-9.el9_2.2 |
sudo-debugsourceRed Hat:rhel_eus:9.2::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-9.el9_2.2 | 0:1.9.5p2-9.el9_2.2 |
sudo-python-pluginRed Hat:rhel_eus:9.2::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-9.el9_2.2 | 0:1.9.5p2-9.el9_2.2 |
sudo-python-plugin-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-9.el9_2.2 | 0:1.9.5p2-9.el9_2.2 |
sudo-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-10.el9_3 | 0:1.9.5p2-10.el9_3 |
sudo-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-10.el9_3 | 0:1.9.5p2-10.el9_3 |
sudo-python-pluginRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-10.el9_3 | 0:1.9.5p2-10.el9_3 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 3 CVEs |
before 0:1.9.5p2-10.el9_3 | 0:1.9.5p2-10.el9_3 |
sudoRed Hat:rhel_eus:8.6::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_6 | 0:1.9.5p2-1.el8_6 |
sudo-debuginfoRed Hat:rhel_eus:8.6::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_6 | 0:1.9.5p2-1.el8_6 |
sudo-debugsourceRed Hat:rhel_eus:8.6::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_6 | 0:1.9.5p2-1.el8_6 |
sudoRed Hat:rhel_eus:8.8::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_8 | 0:1.9.5p2-1.el8_8 |
sudo-debuginfoRed Hat:rhel_eus:8.8::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_8 | 0:1.9.5p2-1.el8_8 |
sudo-debugsourceRed Hat:rhel_eus:8.8::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_8 | 0:1.9.5p2-1.el8_8 |
sudoRed Hat:enterprise_linux:8::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_9 | 0:1.9.5p2-1.el8_9 |
sudo-debuginfoRed Hat:enterprise_linux:8::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_9 | 0:1.9.5p2-1.el8_9 |
sudo-debugsourceRed Hat:enterprise_linux:8::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-1.el8_9 | 0:1.9.5p2-1.el8_9 |
sudoRed Hat:rhel_eus:9.0::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-7.el9_0.4 | 0:1.9.5p2-7.el9_0.4 |
sudo-debuginfoRed Hat:rhel_eus:9.0::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-7.el9_0.4 | 0:1.9.5p2-7.el9_0.4 |
sudo-debugsourceRed Hat:rhel_eus:9.0::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-7.el9_0.4 | 0:1.9.5p2-7.el9_0.4 |
sudo-python-plugin-debuginfoRed Hat:rhel_eus:9.0::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-7.el9_0.4 | 0:1.9.5p2-7.el9_0.4 |
sudoRed Hat:rhel_eus:9.2::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-9.el9_2.2 | 0:1.9.5p2-9.el9_2.2 |
sudo-debuginfoRed Hat:rhel_eus:9.2::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-9.el9_2.2 | 0:1.9.5p2-9.el9_2.2 |
sudo-debugsourceRed Hat:rhel_eus:9.2::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-9.el9_2.2 | 0:1.9.5p2-9.el9_2.2 |
sudo-python-plugin-debuginfoRed Hat:rhel_eus:9.2::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-9.el9_2.2 | 0:1.9.5p2-9.el9_2.2 |
sudoRed Hat:enterprise_linux:9::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-10.el9_3 | 0:1.9.5p2-10.el9_3 |
sudo-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-10.el9_3 | 0:1.9.5p2-10.el9_3 |
sudo-debugsourceRed Hat:enterprise_linux:9::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-10.el9_3 | 0:1.9.5p2-10.el9_3 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux:9::baseos From an advisory covering 3 CVEs |
before 0:1.9.5p2-10.el9_3 | 0:1.9.5p2-10.el9_3 |
sudoSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 1.8.27-4.38.1 | 1.8.27-4.38.1 |
sudoSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 1.8.27-4.38.1 | 1.8.27-4.38.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 1.8.27-4.38.1 | 1.8.27-4.38.1 |
sudoSUSE:Linux Enterprise Micro 5.3 From an advisory covering 3 CVEs |
before 1.9.9-150400.4.26.1 | 1.9.9-150400.4.26.1 |
sudoSUSE:Linux Enterprise Micro 5.4 From an advisory covering 3 CVEs |
before 1.9.9-150400.4.26.1 | 1.9.9-150400.4.26.1 |
sudoSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 3 CVEs |
before 1.9.9-150400.4.26.1 | 1.9.9-150400.4.26.1 |
sudoopenSUSE:Leap Micro 5.3 From an advisory covering 3 CVEs |
before 1.9.9-150400.4.26.1 | 1.9.9-150400.4.26.1 |
sudoopenSUSE:Leap 15.4 From an advisory covering 3 CVEs |
before 1.9.9-150400.4.26.1 | 1.9.9-150400.4.26.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Manager Proxy 4.2 From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Manager Server 4.2 From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Linux Enterprise Micro 5.1 From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Linux Enterprise Micro 5.2 From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Enterprise Storage 7.1 From an advisory covering 2 CVEs |
before 1.9.5p2-150300.3.24.1 | 1.9.5p2-150300.3.24.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.8.27-150000.4.43.1 | 1.8.27-150000.4.43.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.8.27-150000.4.43.1 | 1.8.27-150000.4.43.1 |
sudoSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 2 CVEs |
before 1.8.27-150000.4.43.1 | 1.8.27-150000.4.43.1 |
sudoSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 2 CVEs |
before 1.8.27-150000.4.43.1 | 1.8.27-150000.4.43.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 2 CVEs |
before 1.8.27-150000.4.43.1 | 1.8.27-150000.4.43.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 2 CVEs |
before 1.8.27-150000.4.43.1 | 1.8.27-150000.4.43.1 |
sudoSUSE:Enterprise Storage 7 From an advisory covering 2 CVEs |
before 1.8.27-150000.4.43.1 | 1.8.27-150000.4.43.1 |
sudoSUSE:OpenStack Cloud 9 From an advisory covering 2 CVEs |
before 1.8.20p2-3.39.1 | 1.8.20p2-3.39.1 |
sudoSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 2 CVEs |
before 1.8.20p2-3.39.1 | 1.8.20p2-3.39.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 1.8.20p2-3.39.1 | 1.8.20p2-3.39.1 |
sudoSUSE:Linux Enterprise Server 12 SP4-ESPOS From an advisory covering 2 CVEs |
before 1.8.20p2-3.39.1 | 1.8.20p2-3.39.1 |
sudoSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 2 CVEs |
before 1.8.20p2-3.39.1 | 1.8.20p2-3.39.1 |
sudoUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.8.6p3-0ubuntu31.8.8-2ubuntu11.8.8-2ubuntu21.8.9p4-1ubuntu11.8.9p4-1ubuntu2 Show 12 moreShow less1.8.9p5-1ubuntu11.8.9p5-1ubuntu1.11.8.9p5-1ubuntu1.21.8.9p5-1ubuntu1.31.8.9p5-1ubuntu1.41.8.9p5-1ubuntu1.5+esm11.8.9p5-1ubuntu1.5+esm21.8.9p5-1ubuntu1.5+esm31.8.9p5-1ubuntu1.5+esm51.8.9p5-1ubuntu1.5+esm61.8.9p5-1ubuntu1.5+esm71.8.9p5-1ubuntu1.5+esm8 |
None known |
sudoUbuntu:Pro:16.04:LTS |
before 1.8.16-0ubuntu1.10+esm2, plus listed versions 1.8.12-1ubuntu31.8.16-0ubuntu11.8.16-0ubuntu1.11.8.16-0ubuntu1.21.8.16-0ubuntu1.3 Show 8 moreShow less1.8.16-0ubuntu1.41.8.16-0ubuntu1.51.8.16-0ubuntu1.61.8.16-0ubuntu1.71.8.16-0ubuntu1.81.8.16-0ubuntu1.91.8.16-0ubuntu1.101.8.16-0ubuntu1.10+esm1 |
1.8.16-0ubuntu1.10+esm2 |
sudoUbuntu:18.04:LTS |
before 1.8.21p2-3ubuntu1.6, plus listed versions 1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.11.8.21p2-3ubuntu1.21.8.21p2-3ubuntu1.31.8.21p2-3ubuntu1.41.8.21p2-3ubuntu1.5 |
1.8.21p2-3ubuntu1.6 |
sudoUbuntu:20.04:LTS |
before 1.8.31-1ubuntu1.5, plus listed versions 1.8.27-1ubuntu41.8.29-1ubuntu11.8.31-1ubuntu11.8.31-1ubuntu1.11.8.31-1ubuntu1.21.8.31-1ubuntu1.4 |
1.8.31-1ubuntu1.5 |
sudoUbuntu:22.04:LTS |
before 1.9.9-1ubuntu2.4, plus listed versions 1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.11.9.9-1ubuntu2.21.9.9-1ubuntu2.3 |
1.9.9-1ubuntu2.4 |
sudoUbuntu:18.04:LTS From an advisory covering 2 CVEs |
before 1.8.21p2-3ubuntu1.6, plus listed versions 1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.11.8.21p2-3ubuntu1.21.8.21p2-3ubuntu1.31.8.21p2-3ubuntu1.41.8.21p2-3ubuntu1.5 |
1.8.21p2-3ubuntu1.6 |
sudoUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 1.8.31-1ubuntu1.5, plus listed versions 1.8.27-1ubuntu41.8.29-1ubuntu11.8.31-1ubuntu11.8.31-1ubuntu1.11.8.31-1ubuntu1.21.8.31-1ubuntu1.4 |
1.8.31-1ubuntu1.5 |
sudoUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 1.9.9-1ubuntu2.4, plus listed versions 1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.11.9.9-1ubuntu2.21.9.9-1ubuntu2.3 |
1.9.9-1ubuntu2.4 |
sudoUbuntu:Pro:16.04:LTS From an advisory covering 2 CVEs |
before 1.8.16-0ubuntu1.10+esm2, plus listed versions 1.8.12-1ubuntu31.8.16-0ubuntu11.8.16-0ubuntu1.11.8.16-0ubuntu1.21.8.16-0ubuntu1.3 Show 8 moreShow less1.8.16-0ubuntu1.41.8.16-0ubuntu1.51.8.16-0ubuntu1.61.8.16-0ubuntu1.71.8.16-0ubuntu1.81.8.16-0ubuntu1.91.8.16-0ubuntu1.101.8.16-0ubuntu1.10+esm1 |
1.8.16-0ubuntu1.10+esm2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-28486 is a medium vulnerability (CVSS 5.3) in Sudo Project Sudo, published March 16, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.92%, the 60th percentile. Fixed in sudo 1.9.15_p5-r0.
References
github.com/sudo-project/sudo/commit/334daf92b31b79ce68ed75e2ee14fca265f029ca
security.netapp.com/advisory/ntap-20230420-0002
security.gentoo.org/glsa/202309-12
lists.debian.org/debian-lts-announce/2024/02/msg00002.html
nvd.nist.gov/vuln/detail/CVE-2023-28486
Show 55 moreShow less
access.redhat.com/errata/RHSA-2024:0811
bugzilla.redhat.com/2179272
errata.almalinux.org/9/ALSA-2024-0811.html
docs.bell-sw.com/security/cves/CVE-2023-28486
errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1689258488
errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1711476502.html
security-tracker.debian.org/tracker/CVE-2023-28486
advisories.mageia.org/MGASA-2023-0133.html
bugs.mageia.org/show_bug.cgi?id=31738
lists.suse.com/pipermail/sle-security-updates/2023-March/014226.html
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1205
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0811.json
cve.org/CVERecord?id=CVE-2023-28486
arxiv.org/pdf/2309.02545.pdf
suse.com/support/update/announcement/2023/suse-su-20231659-1
bugzilla.suse.com/1203201
ubuntu.com/security/CVE-2023-28486