Every CVE Search/ Get API key

CVE-2022-43995

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth...

7.1 HighFix available

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.30%Down 0.6 points since Nov 3, 2022
90%50%10%1%

What each source reports

NVD Score used 7.1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.

Record
CVE-2022-43995
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
CVE List 7.1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.

Record
CVE-2022-43995
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2022-46959 7.1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.

Record
EUVD-2022-46959
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3r97-xp9v-83jf 7.1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth...

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the compiler and processor architecture.

Record
GHSA-3r97-xp9v-83jf
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSVALPINE-CVE-2022-43995 7.1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.

Record
ALPINE-CVE-2022-43995
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-03
OSVAZL-11400 7.1

CVE-2022-43995 affecting package sudo for versions less than 1.9.12p1-1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.

Record
AZL-11400
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSV 7.1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.

Record
CVE-2022-43995
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-43995 7.1

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.

Record
DEBIAN-CVE-2022-43995
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-03
OSVOESA-2022-2079 7.1

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.(CVE-2022-43995)

Record
OESA-2022-2079
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVMGASA-2022-0426 No score

Updated sudo packages fix security vulnerability

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture. (CVE-2022-43995)

Record
MGASA-2022-0426
Updated
2026-11-02
OSVopenSUSE-SU-2024:12483-1 No score

sudo-1.9.12-3.1 on GA media

These are all security issues fixed in the sudo-1.9.12-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12483-1
Updated
2026-11-02
OSVSUSE-SU-2022:3886-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).
Record
SUSE-SU-2022:3886-1
Updated
2026-11-02
OSVSUSE-SU-2022:3938-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).
Record
SUSE-SU-2022:3938-1
Updated
2026-11-02
OSVSUSE-SU-2022:4001-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).
Record
SUSE-SU-2022:4001-1
Updated
2026-11-02
OSVSUSE-SU-2022:4077-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a passwor dof seven characters or fewer and using the crypt() password backend (bsc#1204986).

  • Fix wrong information output in the error message (bsc#1190818).

  • Make sure SIGCHLD is not ignored when sudo is executed; fixes race condition (bsc#1203201).

Record
SUSE-SU-2022:4077-1
Updated
2026-11-02
OSVSUSE-SU-2022:4240-1 No score

Security update for sudo

This update for sudo fixes the following issues:

Security fixes:

  • CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).

Other:

  • Make sure SIGCHLD is not ignored when sudo is executed; fixes race condition (bsc#1203201).
  • Change sudo-ldap schema from ASCII to UTF8 (bsc#1197998).
Record
SUSE-SU-2022:4240-1
Updated
2026-11-02
OSVSUSE-SU-2022:4280-1 No score

Security update for sudo

This update for sudo fixes the following issues:

Security fixes:

  • CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986).

Other:

  • Make sure SIGCHLD is not ignored when sudo is executed; fixes race condition (bsc#1203201).
  • Change sudo-ldap schema from ASCII to UTF8 (bsc#1197998).
Record
SUSE-SU-2022:4280-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sudo
Alpine:v3.14
 1.8.0 up to 1.9.12-r1
1.9.12-r1
sudo
Alpine:v3.15
 1.8.0 up to 1.9.12-r1
1.9.12-r1
sudo
Azure Linux:2
 before 1.9.12p1-1
1.9.12p1-1
sudo
Debian:12
 before 1.9.12p1-1
1.9.12p1-1
sudo
Debian:13
 before 1.9.12p1-1
1.9.12p1-1
sudo
Debian:14
 before 1.9.12p1-1
1.9.12p1-1
sudo
Mageia:8
 before 1.9.5p2-2.1.mga8
1.9.5p2-2.1.mga8
sudo
openEuler:20.03-LTS-SP1
 before 1.9.2-7.oe1
1.9.2-7.oe1
sudo
openEuler:20.03-LTS-SP3
 before 1.9.2-7.oe1
1.9.2-7.oe1
sudo
openEuler:22.03-LTS
 before 1.9.8p2-4.oe2203
1.9.8p2-4.oe2203
Show 37 moreShow less
Affected packages
PackageAffectedFixed
sudo
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.8.10p3-10.38.1
1.8.10p3-10.38.1
sudo
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Server 15-LTSS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Manager Proxy 4.1
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Manager Retail Branch Server 4.1
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Manager Server 4.1
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Enterprise Storage 6
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Enterprise Storage 7
 before 1.8.27-150000.4.30.1
1.8.27-150000.4.30.1
sudo
SUSE:Linux Enterprise Micro 5.3
 before 1.9.9-150400.4.6.1
1.9.9-150400.4.6.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.9.9-150400.4.6.1
1.9.9-150400.4.6.1
sudo
openSUSE:Leap 15.4
 before 1.9.9-150400.4.6.1
1.9.9-150400.4.6.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP3
 before 1.9.5p2-150300.3.13.1
1.9.5p2-150300.3.13.1
sudo
SUSE:Linux Enterprise Micro 5.1
 before 1.9.5p2-150300.3.13.1
1.9.5p2-150300.3.13.1
sudo
SUSE:Linux Enterprise Micro 5.2
 before 1.9.5p2-150300.3.13.1
1.9.5p2-150300.3.13.1
sudo
openSUSE:Leap Micro 5.2
 before 1.9.5p2-150300.3.13.1
1.9.5p2-150300.3.13.1
sudo
openSUSE:Leap 15.3
 before 1.9.5p2-150300.3.13.1
1.9.5p2-150300.3.13.1
sudo
SUSE:OpenStack Cloud 9
 before 1.8.20p2-3.33.1
1.8.20p2-3.33.1
sudo
SUSE:OpenStack Cloud Crowbar 9
 before 1.8.20p2-3.33.1
1.8.20p2-3.33.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.8.20p2-3.33.1
1.8.20p2-3.33.1
sudo
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.8.20p2-3.33.1
1.8.20p2-3.33.1
sudo
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.8.20p2-3.33.1
1.8.20p2-3.33.1
sudo
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.8.27-4.30.1
1.8.27-4.30.1
sudo
SUSE:Linux Enterprise Server 12 SP5
 before 1.8.27-4.30.1
1.8.27-4.30.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.8.27-4.30.1
1.8.27-4.30.1
sudo
openSUSE:Tumbleweed
 before 1.9.12-3.1
1.9.12-3.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-43995 is a high vulnerability (CVSS 7.1) in Sudo Project Sudo, published November 2, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in sudo 1.9.12-r1.

References

Show 20 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open