Every CVE Search/ Get API key

CVE-2023-27320

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

7.2 HighFix available

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.66%Up 0.8 points since Mar 1, 2023
90%50%10%1%

What each source reports

NVD Score used 7.2

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
CVE-2023-27320
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-415
Updated
2026-11-02
CVE List 7.2

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
CVE-2023-27320
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-415
Updated
2026-11-02
EUVDEUVD-2023-31097 7.2

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
EUVD-2023-31097
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-w8wp-rv4w-h5pp 7.2

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
GHSA-w8wp-rv4w-h5pp
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-415
Updated
2026-11-02
OSVALPINE-CVE-2023-27320 7.2

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
ALPINE-CVE-2023-27320
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-13784 7.2

CVE-2023-27320 affecting package sudo for versions less than 1.9.13p3-1

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
AZL-13784
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 9 moreShow less
OSVBELL-CVE-2023-27320 7.2

CVE-2023-27320 does not affect BellSoft software

Record
BELL-CVE-2023-27320
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.2

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
CVE-2023-27320
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-27320 7.2

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
DEBIAN-CVE-2023-27320
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1160 7.1

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.(CVE-2023-27320)

Record
OESA-2023-1160
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1172 7.1

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.(CVE-2023-27320)

Record
OESA-2023-1172
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-27320 7.2

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

Record
UBUNTU-CVE-2023-27320
CVSS 3.1
7.2 HighCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:12795-1 No score

sudo-1.9.13p3-2.1 on GA media

These are all security issues fixed in the sudo-1.9.13p3-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12795-1
Updated
2026-11-02
OSVSUSE-SU-2023:1665-1 No score

Security update for sudo

This update for sudo fixes the following issue:

Security issues:

  • CVE-2023-28486: Fixed sudo does not escape control characters in log messages. (bsc#1209362)
  • CVE-2023-28487: Fixed sudo does not escape control characters in sudoreplay output. (bsc#1209361)
  • CVE-2023-27320: Fixed a potential security issue with a double free with per-command chroot sudoers rules (bsc#1208595).

Bug fixes:

  • Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483)
  • If NOPASSWD is specified, don't ask for password if command is not found (bsc#1206772).
  • Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
Record
SUSE-SU-2023:1665-1
Updated
2026-11-02
OSVUSN-5908-1 No score

sudo vulnerability

It was discovered that Sudo incorrectly handled the per-command chroot feature. In certain environments where Sudo is configured with a rule that contains a CHROOT setting, a local attacker could use this issue to cause Sudo to crash, resulting in a denial of service, or possibly escalate privileges.

Record
USN-5908-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sudo
Alpine:v3.17
 1.9.8 up to 1.9.12_p2-r1
1.9.12_p2-r1
sudo
Azure Linux:2
 before 1.9.13p3-1
1.9.13p3-1
sudo
Debian:12
 before 1.9.13p3-1
1.9.13p3-1
sudo
Debian:13
 before 1.9.13p3-1
1.9.13p3-1
sudo
Debian:14
 before 1.9.13p3-1
1.9.13p3-1
sudo
openEuler:22.03-LTS-SP1
 before 1.9.8p2-10.oe2203sp1
1.9.8p2-10.oe2203sp1
sudo
openEuler:22.03-LTS
 before 1.9.8p2-10.oe2203
1.9.8p2-10.oe2203
sudo
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 3 CVEs
 before 1.9.9-150400.4.26.1
1.9.9-150400.4.26.1
sudo
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 3 CVEs
 before 1.9.9-150400.4.26.1
1.9.9-150400.4.26.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP4
From an advisory covering 3 CVEs
 before 1.9.9-150400.4.26.1
1.9.9-150400.4.26.1
Show 4 moreShow less
Affected packages
PackageAffectedFixed
sudo
openSUSE:Leap Micro 5.3
From an advisory covering 3 CVEs
 before 1.9.9-150400.4.26.1
1.9.9-150400.4.26.1
sudo
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 1.9.9-150400.4.26.1
1.9.9-150400.4.26.1
sudo
Ubuntu:22.04:LTS
 before 1.9.9-1ubuntu2.3, plus listed versions
1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.11.9.9-1ubuntu2.2
1.9.9-1ubuntu2.3
sudo
openSUSE:Tumbleweed
 before 1.9.13p3-2.1
1.9.13p3-2.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-27320 is a high vulnerability (CVSS 7.2) in Sudo Project Sudo, published February 28, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.66%, the 76th percentile. Fixed in sudo 1.9.12_p2-r1.

References

Show 26 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open