CVE-2011-0010
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a...
CVE-2011-0010 is a medium vulnerability (CVSS 4.4) in Todd Miller Sudo, published January 18, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. Fixed in sudo 1.7.4p4-6.
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
Exploit likelihood
What each source reports
NVD Score used
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
- Record
CVE-2011-0010- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
- Record
CVE-2011-0010- Updated
- 2026-11-02
EUVDEUVD-2011-0037 No score
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
- Record
EUVD-2011-0037- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mxvj-5g45-2vv5 No score
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a...
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
- Record
GHSA-mxvj-5g45-2vv5- Updated
- 2026-11-02
OSV No score
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
- Record
CVE-2011-0010- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-0010 No score
check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command.
- Record
DEBIAN-CVE-2011-0010- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10551-1 No score
sudo-1.8.18p1-1.1 on GA media
These are all security issues fixed in the sudo-1.8.18p1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10551-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoDebian:12 |
before 1.7.4p4-6 | 1.7.4p4-6 |
sudoDebian:13 |
before 1.7.4p4-6 | 1.7.4p4-6 |
sudoDebian:14 |
before 1.7.4p4-6 | 1.7.4p4-6 |
sudoRed Hat:enterprise_linux:6::client |
before 0:1.7.4p5-5.el6 | 0:1.7.4p5-5.el6 |
sudo-debuginfoRed Hat:enterprise_linux:6::client |
before 0:1.7.4p5-5.el6 | 0:1.7.4p5-5.el6 |
sudoRed Hat:enterprise_linux:6::computenode |
before 0:1.7.4p5-5.el6 | 0:1.7.4p5-5.el6 |
sudo-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:1.7.4p5-5.el6 | 0:1.7.4p5-5.el6 |
sudoRed Hat:enterprise_linux:6::server |
before 0:1.7.4p5-5.el6 | 0:1.7.4p5-5.el6 |
sudo-debuginfoRed Hat:enterprise_linux:6::server |
before 0:1.7.4p5-5.el6 | 0:1.7.4p5-5.el6 |
sudoRed Hat:enterprise_linux:6::workstation |
before 0:1.7.4p5-5.el6 | 0:1.7.4p5-5.el6 |
Show 6 moreShow less
| Package | Affected | Fixed |
|---|---|---|
sudo-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:1.7.4p5-5.el6 | 0:1.7.4p5-5.el6 |
sudoRed Hat:enterprise_linux:5::client |
before 0:1.7.2p1-13.el5 | 0:1.7.2p1-13.el5 |
sudo-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.7.2p1-13.el5 | 0:1.7.2p1-13.el5 |
sudoRed Hat:enterprise_linux:5::server |
before 0:1.7.2p1-13.el5 | 0:1.7.2p1-13.el5 |
sudo-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.7.2p1-13.el5 | 0:1.7.2p1-13.el5 |
sudoopenSUSE:Tumbleweed |
before 1.8.18p1-1.1 | 1.8.18p1-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
vupen.com/english/advisories/2011/0362
sudo.ws/sudo/alerts/runas_group_pw.html
secunia.com/advisories/43068
security.gentoo.org/glsa/glsa-201203-06.xml
slackware.com/security/viewer.php?l=slackware-security&y=2011&m=slackware-security.593654
mandriva.com/security/advisories?name=MDVSA-2011:018
Show 49 moreShow less
openwall.com/lists/oss-security/2011/01/11/3
lists.fedoraproject.org/pipermail/package-announce/2011-January/053263.html
ubuntu.com/usn/USN-1046-1
redhat.com/support/errata/RHSA-2011-0599.html
osvdb.org/70400
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
exchange.xforce.ibmcloud.com/vulnerabilities/64636
securityfocus.com/bid/45774
bugzilla.redhat.com/show_bug.cgi?id=668879
bugs.debian.org/cgi-bin/bugreport.cgi?bug=609641
nvd.nist.gov/vuln/detail/CVE-2011-0010
github.com/advisories/GHSA-mxvj-5g45-2vv5
security-tracker.debian.org/tracker/CVE-2011-0010
access.redhat.com/errata/RHSA-2011:0599
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0599.json
cve.org/CVERecord?id=CVE-2011-0010
suse.com/security/cve/CVE-2010-1163