Every CVE Search/ Get API key

CVE-2023-22809

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the...

7.8 HighPublic exploitFix available

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

55.4%Up 54.4 points since Jan 19, 2023
90%50%10%1%

What each source reports

NVD Score used 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
CVE-2023-22809
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
CVE List 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
CVE-2023-22809
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
EUVDEUVD-2023-26921 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
EUVD-2023-26921
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-3vwp-294x-6v9c 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the...

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
GHSA-3vwp-294x-6v9c
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-269
Updated
2026-11-02
OSVALPINE-CVE-2023-22809 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
ALPINE-CVE-2023-22809
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-13030 7.8

CVE-2023-22809 affecting package sudo for versions less than 1.9.12p2-1

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
AZL-13030
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 38 moreShow less
OSVBELL-CVE-2023-22809 7.8

CVE-2023-22809 does not affect BellSoft software

Record
BELL-CVE-2023-22809
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
CVE-2023-22809
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-22809 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
DEBIAN-CVE-2023-22809
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1049 8.1

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.(CVE-2023-22809)

Record
OESA-2023-1049
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:0280 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0280
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0281 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0281
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0282 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0282
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0283 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0283
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0284 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0284
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0287 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0287
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0291 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0291
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0292 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0292
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0293 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:0293
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0859 8.6

Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update batch#4 (oVirt-4.5.3-4)

Record
RHSA-2023:0859
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVRHSA-2023:3262 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:3262
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:3264 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:3264
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:3276 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2023:3276
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:0282 7.8

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:0282
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:0284 7.8

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:0284
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-22809 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Record
UBUNTU-CVE-2023-22809
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:0282 No score

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:0282
Updated
2026-11-02
OSVALSA-2023:0284 No score

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:0284
Updated
2026-11-02
OSVCLSA-2023-1675984342 No score

sudo: Fix of CVE-2023-22809

  • CVE-2023-22809: do not permit editor arguments to include "--"
Record
CLSA-2023-1675984342
Updated
2026-11-02
OSVCLSA-2023-1675984682 No score

sudo: Fix of CVE-2023-22809

  • CVE-2023-22809: do not permit editor arguments to include "--"
Record
CLSA-2023-1675984682
Updated
2026-11-02
OSVCLSA-2023-1675985375 No score

Fix CVE(s): CVE-2023-22809

  • SECURITY UPDATE: edit a file not permitted by the security policy
    • debian/patches/CVE-2023-22809.patch: do not permit editor arguments to include "--"
    • CVE-2023-22809
Record
CLSA-2023-1675985375
Updated
2026-11-02
OSVCLSA-2023-1675985571 No score

sudo: Fix of CVE-2023-22809

  • CVE-2023-22809: do not permit editor arguments to include "--" for sudoedit
  • build tests have been enabled
Record
CLSA-2023-1675985571
Updated
2026-11-02
OSVCLSA-2023-1675986271 No score

sudo: Fix of CVE-2023-22809

  • CVE-2023-22809: do not permit editor arguments to include "--" for sudoedit
  • build tests have been enabled
Record
CLSA-2023-1675986271
Updated
2026-11-02
OSVMGASA-2023-0025 No score

Updated sudo packages fix security vulnerability

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value. (CVE-2023-22809)

Record
MGASA-2023-0025
Updated
2026-11-02
OSVopenSUSE-SU-2024:12638-1 No score

sudo-1.9.12p2-1.1 on GA media

These are all security issues fixed in the sudo-1.9.12p2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12638-1
Updated
2026-11-02
OSVSUSE-SU-2023:0100-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-22809: Fixed an arbitrary file write issue that could be exploited by users with sudoedit permissions (bsc#1207082).
Record
SUSE-SU-2023:0100-1
Updated
2026-11-02
OSVSUSE-SU-2023:0101-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-22809: Fixed an arbitrary file write issue that could be exploited by users with sudoedit permissions (bsc#1207082).
Record
SUSE-SU-2023:0101-1
Updated
2026-11-02
OSVSUSE-SU-2023:0114-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-22809: Fixed an arbitrary file write issue that could be exploited by users with sudoedit permissions (bsc#1207082).
Record
SUSE-SU-2023:0114-1
Updated
2026-11-02
OSVSUSE-SU-2023:0115-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-22809: Fixed an arbitrary file write issue that could be exploited by users with sudoedit permissions (bsc#1207082).
Record
SUSE-SU-2023:0115-1
Updated
2026-11-02
OSVSUSE-SU-2023:0116-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-22809: Fixed an arbitrary file write issue that could be exploited by users with sudoedit permissions (bsc#1207082).

Other fixes:

  • Fixed a potential crash while using the sssd plugin (bsc#1206170).
Record
SUSE-SU-2023:0116-1
Updated
2026-11-02
OSVSUSE-SU-2023:0117-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-22809: Fixed an arbitrary file write issue that could be exploited by users with sudoedit permissions (bsc#1207082).

Other fixes:

  • Fixed a potential crash while using the sssd plugin (bsc#1206170).
Record
SUSE-SU-2023:0117-1
Updated
2026-11-02
OSVUSN-5811-1 No score

sudo vulnerabilities

Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoedit command. A local attacker that has permission to use the sudoedit command could possibly use this issue to edit arbitrary files. (CVE-2023-22809)

It was discovered that the Protobuf-c library, used by Sudo, incorrectly handled certain arithmetic shifts. An attacker could possibly use this issue to cause Sudo to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-33070)

Record
USN-5811-1
Updated
2026-11-02
OSVUSN-5811-2 No score

sudo vulnerability

USN-5811-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoedit command. A local attacker that has permission to use the sudoedit command could possibly use this issue to edit arbitrary files. (CVE-2023-22809)

Record
USN-5811-2
Updated
2026-11-02
OSVUSN-5811-3 No score

sudo vulnerability

USN-5811-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoedit command. A local attacker that has permission to use the sudoedit command could possibly use this issue to edit arbitrary files. (CVE-2023-22809)

Record
USN-5811-3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sudo
Alpine:v3.14
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.15
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.17
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.18
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.19
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.20
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.21
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.22
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.23
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
sudo
Alpine:v3.24
 1.8.0 up to 1.9.12_p2-r0
1.9.12_p2-r0
Show 135 moreShow less
Affected packages
PackageAffectedFixed
sudo
AlmaLinux:9
 before 1.9.5p2-7.el9_1.1
1.9.5p2-7.el9_1.1
sudo-python-plugin
AlmaLinux:9
 before 1.9.5p2-7.el9_1.1
1.9.5p2-7.el9_1.1
sudo
AlmaLinux:8
 before 1.8.29-8.el8_7.1
1.8.29-8.el8_7.1
sudo
Azure Linux:2
 before 1.9.12p2-1
1.9.12p2-1
sudo
TuxCare:CentOS:8.4
 before 1.8.29-7.el8_4.1.tuxcare.els1
1.8.29-7.el8_4.1.tuxcare.els1
sudo-devel
TuxCare:CentOS:8.4
 before 1.8.29-7.el8_4.1.tuxcare.els1
1.8.29-7.el8_4.1.tuxcare.els1
sudo
TuxCare:CentOS:8.5
 before 1.8.29-7.el8_4.1.tuxcare.els1
1.8.29-7.el8_4.1.tuxcare.els1
sudo-devel
TuxCare:CentOS:8.5
 before 1.8.29-7.el8_4.1.tuxcare.els1
1.8.29-7.el8_4.1.tuxcare.els1
sudo
TuxCare:Ubuntu:16.04
 before 1.8.16-0ubuntu1.11+tuxcare.els1
1.8.16-0ubuntu1.11+tuxcare.els1
sudo-ldap
TuxCare:Ubuntu:16.04
 before 1.8.16-0ubuntu1.11+tuxcare.els1
1.8.16-0ubuntu1.11+tuxcare.els1
sudo
TuxCare:CentOS:6
 before 1.8.6p3-32.el6.tuxcare.els1
1.8.6p3-32.el6.tuxcare.els1
sudo-devel
TuxCare:CentOS:6
 before 1.8.6p3-32.el6.tuxcare.els1
1.8.6p3-32.el6.tuxcare.els1
sudo
TuxCare:OracleLinux:6
 before 1.8.6p3-32.el6.tuxcare.els1
1.8.6p3-32.el6.tuxcare.els1
sudo-devel
TuxCare:OracleLinux:6
 before 1.8.6p3-32.el6.tuxcare.els1
1.8.6p3-32.el6.tuxcare.els1
sudo
Debian:12
 before 1.9.12p2-1
1.9.12p2-1
sudo
Debian:13
 before 1.9.12p2-1
1.9.12p2-1
sudo
Debian:14
 before 1.9.12p2-1
1.9.12p2-1
sudo
Debian:10
 before 1.8.27-1+deb10u5, plus listed versions
1.8.27-11.8.27-1+deb10u11.8.27-1+deb10u21.8.27-1+deb10u31.8.27-1+deb10u4
1.8.27-1+deb10u5
sudo
Debian:11
 before 1.9.5p2-3+deb11u1, plus listed versions
1.9.5p2-3
1.9.5p2-3+deb11u1
sudo
Mageia:8
 before 1.9.5p2-2.2.mga8
1.9.5p2-2.2.mga8
sudo
openEuler:20.03-LTS-SP1
 before 1.9.2-10.oe1
1.9.2-10.oe1
sudo
openEuler:20.03-LTS-SP3
 before 1.9.2-10.oe1
1.9.2-10.oe1
sudo
openEuler:22.03-LTS
 before 1.9.8p2-9.oe2203sp1
1.9.8p2-9.oe2203sp1
sudo
openEuler:22.03-LTS-SP1
 before 1.9.8p2-9.oe2203sp1
1.9.8p2-9.oe2203sp1
sudo
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.8.25p1-8.el8_1.3
0:1.8.25p1-8.el8_1.3
sudo-debuginfo
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.8.25p1-8.el8_1.3
0:1.8.25p1-8.el8_1.3
sudo-debugsource
Red Hat:rhel_e4s:8.1::baseos
 before 0:1.8.25p1-8.el8_1.3
0:1.8.25p1-8.el8_1.3
sudo-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:1.9.5p2-7.el9_0.2
0:1.9.5p2-7.el9_0.2
sudo-debugsource
Red Hat:rhel_eus:9.0::appstream
 before 0:1.9.5p2-7.el9_0.2
0:1.9.5p2-7.el9_0.2
sudo-python-plugin
Red Hat:rhel_eus:9.0::appstream
 before 0:1.9.5p2-7.el9_0.2
0:1.9.5p2-7.el9_0.2
sudo-python-plugin-debuginfo
Red Hat:rhel_eus:9.0::appstream
 before 0:1.9.5p2-7.el9_0.2
0:1.9.5p2-7.el9_0.2
sudo
Red Hat:rhel_eus:9.0::baseos
 before 0:1.9.5p2-7.el9_0.2
0:1.9.5p2-7.el9_0.2
sudo-debuginfo
Red Hat:rhel_eus:9.0::baseos
 before 0:1.9.5p2-7.el9_0.2
0:1.9.5p2-7.el9_0.2
sudo-debugsource
Red Hat:rhel_eus:9.0::baseos
 before 0:1.9.5p2-7.el9_0.2
0:1.9.5p2-7.el9_0.2
sudo-python-plugin-debuginfo
Red Hat:rhel_eus:9.0::baseos
 before 0:1.9.5p2-7.el9_0.2
0:1.9.5p2-7.el9_0.2
sudo-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo-python-plugin
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo
Red Hat:rhel_eus:8.6::baseos
 before 0:1.8.29-8.el8_6.1
0:1.8.29-8.el8_6.1
sudo-debuginfo
Red Hat:rhel_eus:8.6::baseos
 before 0:1.8.29-8.el8_6.1
0:1.8.29-8.el8_6.1
sudo-debugsource
Red Hat:rhel_eus:8.6::baseos
 before 0:1.8.29-8.el8_6.1
0:1.8.29-8.el8_6.1
sudo
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.29-8.el8_7.1
0:1.8.29-8.el8_7.1
sudo-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.29-8.el8_7.1
0:1.8.29-8.el8_7.1
sudo-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.29-8.el8_7.1
0:1.8.29-8.el8_7.1
sudo
Red Hat:rhel_els:6
 before 0:1.8.6p3-29.el6_10.7
0:1.8.6p3-29.el6_10.7
sudo-debuginfo
Red Hat:rhel_els:6
 before 0:1.8.6p3-29.el6_10.7
0:1.8.6p3-29.el6_10.7
sudo-devel
Red Hat:rhel_els:6
 before 0:1.8.6p3-29.el6_10.7
0:1.8.6p3-29.el6_10.7
sudo
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo-devel
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo-devel
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-10.el7_9.3
0:1.8.23-10.el7_9.3
sudo
Red Hat:rhel_aus:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo-debuginfo
Red Hat:rhel_aus:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo-debugsource
Red Hat:rhel_aus:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo
Red Hat:rhel_e4s:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo-debuginfo
Red Hat:rhel_e4s:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo-debugsource
Red Hat:rhel_e4s:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo
Red Hat:rhel_tus:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo-debuginfo
Red Hat:rhel_tus:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo-debugsource
Red Hat:rhel_tus:8.2::baseos
 before 0:1.8.29-5.el8_2.2
0:1.8.29-5.el8_2.2
sudo
Red Hat:rhel_eus:8.4::baseos
 before 0:1.8.29-7.el8_4.2
0:1.8.29-7.el8_4.2
sudo-debuginfo
Red Hat:rhel_eus:8.4::baseos
 before 0:1.8.29-7.el8_4.2
0:1.8.29-7.el8_4.2
sudo-debugsource
Red Hat:rhel_eus:8.4::baseos
 before 0:1.8.29-7.el8_4.2
0:1.8.29-7.el8_4.2
redhat-virtualization-host
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 3 CVEs
 before 0:4.5.3-202302150956_8.6
0:4.5.3-202302150956_8.6
redhat-virtualization-host-image-update
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 3 CVEs
 before 0:4.5.3-202302150956_8.6
0:4.5.3-202302150956_8.6
sudo
Red Hat:rhel_aus:7.6::server
 before 0:1.8.23-3.el7_6.3
0:1.8.23-3.el7_6.3
sudo-debuginfo
Red Hat:rhel_aus:7.6::server
 before 0:1.8.23-3.el7_6.3
0:1.8.23-3.el7_6.3
sudo-devel
Red Hat:rhel_aus:7.6::server
 before 0:1.8.23-3.el7_6.3
0:1.8.23-3.el7_6.3
sudo
Red Hat:rhel_aus:7.4::server
 before 0:1.8.19p2-12.el7_4.3
0:1.8.19p2-12.el7_4.3
sudo-debuginfo
Red Hat:rhel_aus:7.4::server
 before 0:1.8.19p2-12.el7_4.3
0:1.8.19p2-12.el7_4.3
sudo-devel
Red Hat:rhel_aus:7.4::server
 before 0:1.8.19p2-12.el7_4.3
0:1.8.19p2-12.el7_4.3
sudo
Red Hat:rhel_aus:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo-debuginfo
Red Hat:rhel_aus:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo
Red Hat:rhel_e4s:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo-debuginfo
Red Hat:rhel_e4s:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo
Red Hat:rhel_tus:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo-debuginfo
Red Hat:rhel_tus:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo-devel
Red Hat:rhel_aus:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo-devel
Red Hat:rhel_e4s:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo-devel
Red Hat:rhel_tus:7.7::server
 before 0:1.8.23-4.el7_7.4
0:1.8.23-4.el7_7.4
sudo
Rocky Linux:9
 before 0:1.9.5p2-7.el9_1.1
0:1.9.5p2-7.el9_1.1
sudo
Rocky Linux:8
 before 0:1.8.29-8.el8_7.1
0:1.8.29-8.el8_7.1
sudo
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.8.10p3-10.44.1
1.8.10p3-10.44.1
sudo
SUSE:OpenStack Cloud 9
 before 1.8.20p2-3.36.1
1.8.20p2-3.36.1
sudo
SUSE:OpenStack Cloud Crowbar 9
 before 1.8.20p2-3.36.1
1.8.20p2-3.36.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.8.20p2-3.36.1
1.8.20p2-3.36.1
sudo
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.8.20p2-3.36.1
1.8.20p2-3.36.1
sudo
SUSE:Linux Enterprise Micro 5.3
 before 1.9.9-150400.4.12.1
1.9.9-150400.4.12.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.9.9-150400.4.12.1
1.9.9-150400.4.12.1
sudo
openSUSE:Leap Micro 5.3
 before 1.9.9-150400.4.12.1
1.9.9-150400.4.12.1
sudo
openSUSE:Leap 15.4
 before 1.9.9-150400.4.12.1
1.9.9-150400.4.12.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Linux Enterprise Real Time 15 SP3
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Manager Proxy 4.2
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Manager Retail Branch Server 4.2
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Manager Server 4.2
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Linux Enterprise Micro 5.1
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Linux Enterprise Micro 5.2
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Enterprise Storage 7.1
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
openSUSE:Leap Micro 5.2
 before 1.9.5p2-150300.3.19.1
1.9.5p2-150300.3.19.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.8.27-150000.4.38.1
1.8.27-150000.4.38.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.8.27-150000.4.38.1
1.8.27-150000.4.38.1
sudo
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.8.27-150000.4.38.1
1.8.27-150000.4.38.1
sudo
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.8.27-150000.4.38.1
1.8.27-150000.4.38.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.8.27-150000.4.38.1
1.8.27-150000.4.38.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.8.27-150000.4.38.1
1.8.27-150000.4.38.1
sudo
SUSE:Enterprise Storage 6
 before 1.8.27-150000.4.38.1
1.8.27-150000.4.38.1
sudo
SUSE:Enterprise Storage 7
 before 1.8.27-150000.4.38.1
1.8.27-150000.4.38.1
sudo
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.8.27-4.33.1
1.8.27-4.33.1
sudo
SUSE:Linux Enterprise Server 12 SP5
 before 1.8.27-4.33.1
1.8.27-4.33.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.8.27-4.33.1
1.8.27-4.33.1
sudo
Ubuntu:Pro:14.04:LTS
 before 1.8.9p5-1ubuntu1.5+esm7, plus listed versions
1.8.6p3-0ubuntu31.8.8-2ubuntu11.8.8-2ubuntu21.8.9p4-1ubuntu11.8.9p4-1ubuntu2
Show 10 moreShow less
1.8.9p5-1ubuntu11.8.9p5-1ubuntu1.11.8.9p5-1ubuntu1.21.8.9p5-1ubuntu1.31.8.9p5-1ubuntu1.41.8.9p5-1ubuntu1.5+esm11.8.9p5-1ubuntu1.5+esm21.8.9p5-1ubuntu1.5+esm31.8.9p5-1ubuntu1.5+esm51.8.9p5-1ubuntu1.5+esm6
1.8.9p5-1ubuntu1.5+esm7
sudo
Ubuntu:Pro:16.04:LTS
 before 1.8.16-0ubuntu1.10+esm1, plus listed versions
1.8.12-1ubuntu31.8.16-0ubuntu11.8.16-0ubuntu1.11.8.16-0ubuntu1.21.8.16-0ubuntu1.3
Show 7 moreShow less
1.8.16-0ubuntu1.41.8.16-0ubuntu1.51.8.16-0ubuntu1.61.8.16-0ubuntu1.71.8.16-0ubuntu1.81.8.16-0ubuntu1.91.8.16-0ubuntu1.10
1.8.16-0ubuntu1.10+esm1
sudo
Ubuntu:18.04:LTS
 before 1.8.21p2-3ubuntu1.5, plus listed versions
1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.11.8.21p2-3ubuntu1.21.8.21p2-3ubuntu1.31.8.21p2-3ubuntu1.4
1.8.21p2-3ubuntu1.5
sudo
Ubuntu:20.04:LTS
 before 1.8.31-1ubuntu1.4, plus listed versions
1.8.27-1ubuntu41.8.29-1ubuntu11.8.31-1ubuntu11.8.31-1ubuntu1.11.8.31-1ubuntu1.2
1.8.31-1ubuntu1.4
sudo
Ubuntu:22.04:LTS
 before 1.9.9-1ubuntu2.2, plus listed versions
1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.1
1.9.9-1ubuntu2.2
sudo
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 1.8.21p2-3ubuntu1.5, plus listed versions
1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.11.8.21p2-3ubuntu1.21.8.21p2-3ubuntu1.31.8.21p2-3ubuntu1.4
1.8.21p2-3ubuntu1.5
sudo
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 1.8.31-1ubuntu1.4, plus listed versions
1.8.27-1ubuntu41.8.29-1ubuntu11.8.31-1ubuntu11.8.31-1ubuntu1.11.8.31-1ubuntu1.2
1.8.31-1ubuntu1.4
sudo
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 1.9.9-1ubuntu2.2, plus listed versions
1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.1
1.9.9-1ubuntu2.2
sudo
openSUSE:Tumbleweed
 before 1.9.12p2-1.1
1.9.12p2-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitSudoedit Extra Arguments Priv Esc2023-01-18
PoC in GitHubn3m1sys/CVE-2023-22809-sudoedit-privesc2023-01-21
PoC in GitHubM4fiaB0y/CVE-2023-228092023-02-22
Exploit-DBsudo 1.8.0 to 1.9.12p1 - Privilege Escalation2023-04-03
PoC in GitHubP4x1s/CVE-2023-22809-sudo-POC2023-04-06
PoC in GitHubhello4r1end/patch_CVE-2023-228092023-06-08
PoC in GitHubChan9Yan9/CVE-2023-228092023-06-20
PoC in GitHubpashayogi/CVE-2023-228092023-06-25
PoC in GitHubasepsaepdin/CVE-2023-228092023-07-10
PoC in GitHubToothless5143/CVE-2023-228092023-08-06
Show 4 moreShow less
Public exploits
SourceLinkDate
PoC in GitHublaxmiyamkolu/SUDO-privilege-escalation2024-08-26
PoC in GitHubD0rDa4aN919/CVE-2023-22809-Exploiter2024-08-28
PoC in GitHubSpydomain/CVE-2023-22809-automated-python-exploits2025-07-30
PoC in GitHubValeuDoamne/CVE-2023-228092026-01-14

History

History
RecordedChangedSources
affected, facts
affected, exploitsOSV
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-22809 is a high vulnerability (CVSS 7.8) in Sudo Project Sudo, published January 18, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 55.4%, the 99th percentile. Fixed in sudo 1.9.12_p2-r0.

References

Show 86 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open