Every CVE Search/ Get API key

CVE-2023-42465

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege...

7.0 HighFix available

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.55%Up 0.5 points since Dec 23, 2023
90%50%10%1%

What each source reports

NVD Score used 7.0

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Record
CVE-2023-42465
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
CVE List No score

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Record
CVE-2023-42465
Updated
2026-11-02
EUVDEUVD-2023-46905 No score

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Record
EUVD-2023-46905
Updated
2026-11-02
GitHub AdvisoriesGHSA-62rj-gv2c-8ghr 7.0

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege...

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Record
GHSA-62rj-gv2c-8ghr
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-32227 7.0

CVE-2023-42465 affecting package sudo for versions less than 1.9.15p5-1

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Record
AZL-32227
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVBELL-CVE-2023-42465 7.0
Record
BELL-CVE-2023-42465
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 35 moreShow less
OSVDEBIAN-CVE-2023-42465 7.0

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Record
DEBIAN-CVE-2023-42465
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1071 7.0

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.(CVE-2023-42465)

Record
OESA-2024-1071
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:0811 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2024:0811
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2024:0811 No score

Moderate: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Bug Fix(es) and Enhancement(s):

  • CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  • CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  • CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
Record
ALSA-2024:0811
Updated
2026-11-02
OSVCLSA-2024-1708426423 No score

sudo: Fix of CVE-2023-42465

  • CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks
Record
CLSA-2024-1708426423
Updated
2026-11-02
OSVCLSA-2024-1708426650 No score

sudo: Fix of CVE-2023-42465

  • CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks
Record
CLSA-2024-1708426650
Updated
2026-11-02
OSVCLSA-2024-1708427919 No score

sudo: Fix of CVE-2023-42465

  • CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks
Record
CLSA-2024-1708427919
Updated
2026-11-02
OSVCLSA-2024-1708428112 No score

sudo: Fix of CVE-2023-42465

  • CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks
Record
CLSA-2024-1708428112
Updated
2026-11-02
OSVCLSA-2024-1708639566 No score

sudo: Fix of CVE-2023-42465

  • Remove sudo-1.9.15-CVE-2023-42465.patch due to bug
Record
CLSA-2024-1708639566
Updated
2026-11-02
OSVCLSA-2024-1708639645 No score

sudo: Fix of CVE-2023-42465

  • Remove sudo-1.9.15-CVE-2023-42465.patch due to bug
Record
CLSA-2024-1708639645
Updated
2026-11-02
OSVCLSA-2024-1709547826 No score

sudo: Fix of CVE-2023-42465

  • CVE-2023-42465: Prevent row hammer attacks by modifying application logic to equal a success value instead of not equaling an error value and enhancing bit flip resistance of values.
Record
CLSA-2024-1709547826
Updated
2026-11-02
OSVCLSA-2024-1713370315 No score

sudo: Fix of CVE-2023-42465

  • CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks
Record
CLSA-2024-1713370315
Updated
2026-11-02
OSVCLSA-2025-1748365696 No score

sudo: Fix of CVE-2021-3156

  • CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks
Record
CLSA-2025-1748365696
Updated
2026-11-02
OSVCLSA-2025-1761325294 No score

Fix CVE(s): CVE-2021-23240, CVE-2023-42465, CVE-2025-32462

  • SECURITY UPDATE: privilege escalation via symlinks
  • debian/patches/CVE-2021-23240.patch: fix opportunity for local unprivileged user to gain file ownership via symlinks.
  • SECURITY UPDATE: unauthorized commands execution on unintended hosts
  • debian/patches/CVE-2025-32462.patch: restrict user from setting remote host for command unless listing privileges
  • CVE-2025-32462
  • SECURITY UPDATE: row hammer attack
  • debian/patches/CVE-2023-42465.patch: make return values resist to single bit flips
  • CVE-2023-42465
Record
CLSA-2025-1761325294
Updated
2026-11-02
OSVCLSA-2026-1790600964 No score

sudo: Fix of 7 CVEs

  • Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
  • CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
  • CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
  • Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
Record
CLSA-2026-1790600964
Updated
2026-11-02
OSVCLSA-2026-1790601456 No score

sudo: Fix of 7 CVEs

  • Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
  • CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
  • CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
  • Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
Record
CLSA-2026-1790601456
Updated
2026-11-02
OSVCLSA-2026-1790606589 No score

sudo: Fix of 7 CVEs

  • Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
  • CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
  • CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
  • Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
Record
CLSA-2026-1790606589
Updated
2026-11-02
OSV No score

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Record
CVE-2023-42465
Updated
2026-11-02
OSVopenSUSE-SU-2024:13490-1 No score

sudo-1.9.15p2-1.1 on GA media

These are all security issues fixed in the sudo-1.9.15p2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13490-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2023-42465 No score

CVE-2023-42465 in sudo - Patched by Root

Root has patched CVE-2023-42465 in the sudo package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2023-42465
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2023-42465 No score

CVE-2023-42465 in sudo - Patched by Root

Root has patched CVE-2023-42465 in the sudo package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2023-42465
Updated
2026-11-02
OSVSUSE-SU-2024:0794-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
Record
SUSE-SU-2024:0794-1
Updated
2026-11-02
OSVSUSE-SU-2024:0794-2 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
Record
SUSE-SU-2024:0794-2
Updated
2026-11-02
OSVSUSE-SU-2024:0795-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
Record
SUSE-SU-2024:0795-1
Updated
2026-11-02
OSVSUSE-SU-2024:0795-2 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
Record
SUSE-SU-2024:0795-2
Updated
2026-11-02
OSVSUSE-SU-2024:0796-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
Record
SUSE-SU-2024:0796-1
Updated
2026-11-02
OSVSUSE-SU-2024:0796-2 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
Record
SUSE-SU-2024:0796-2
Updated
2026-11-02
OSVSUSE-SU-2024:0797-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
Record
SUSE-SU-2024:0797-1
Updated
2026-11-02
OSVSUSE-SU-2024:0797-2 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).
Record
SUSE-SU-2024:0797-2
Updated
2026-11-02
OSVSUSE-SU-2024:0834-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).

Fixed issues introduced by first patches for CVE-2023-42465 (bsc#1220389).

Record
SUSE-SU-2024:0834-1
Updated
2026-11-02
OSVSUSE-SU-2024:0876-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).
Record
SUSE-SU-2024:0876-1
Updated
2026-11-02
OSVSUSE-SU-2024:0876-2 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).
Record
SUSE-SU-2024:0876-2
Updated
2026-11-02
OSVSUSE-SU-2024:0877-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).
Record
SUSE-SU-2024:0877-1
Updated
2026-11-02
OSVSUSE-SU-2024:0889-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).
Record
SUSE-SU-2024:0889-1
Updated
2026-11-02
OSVSUSE-SU-2024:0890-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).
Record
SUSE-SU-2024:0890-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sudo
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.9.5p2-10.el9_3
1.9.5p2-10.el9_3
sudo-python-plugin
AlmaLinux:9
From an advisory covering 3 CVEs
 before 1.9.5p2-10.el9_3
1.9.5p2-10.el9_3
sudo
Azure Linux:2
 before 1.9.15p5-1
1.9.15p5-1
sudo
Alpaquita:23
 1.9.12_p1-r1 up to 1.9.15_p5-r0
1.9.15_p5-r0
sudo
Alpaquita:stream
 1.9.13_p3-r0 up to 1.9.15-r0
1.9.15-r0
sudo
TuxCare:CentOS:8.4
 before 1.8.29-7.el8_4.1.tuxcare.els2
1.8.29-7.el8_4.1.tuxcare.els2
sudo-devel
TuxCare:CentOS:8.4
 before 1.8.29-7.el8_4.1.tuxcare.els2
1.8.29-7.el8_4.1.tuxcare.els2
sudo
TuxCare:CentOS:8.5
 before 1.8.29-7.el8_4.1.tuxcare.els2
1.8.29-7.el8_4.1.tuxcare.els2
sudo-devel
TuxCare:CentOS:8.5
 before 1.8.29-7.el8_4.1.tuxcare.els2
1.8.29-7.el8_4.1.tuxcare.els2
sudo
TuxCare:CentOS:6
 before 1.8.6p3-32.el6.tuxcare.els2
1.8.6p3-32.el6.tuxcare.els2
Show 94 moreShow less
Affected packages
PackageAffectedFixed
sudo-devel
TuxCare:CentOS:6
 before 1.8.6p3-32.el6.tuxcare.els2
1.8.6p3-32.el6.tuxcare.els2
sudo
TuxCare:OracleLinux:6
 before 1.8.6p3-32.el6.tuxcare.els2
1.8.6p3-32.el6.tuxcare.els2
sudo-devel
TuxCare:OracleLinux:6
 before 1.8.6p3-32.el6.tuxcare.els2
1.8.6p3-32.el6.tuxcare.els2
sudo
TuxCare:OracleLinux:6
 before 1.8.6p3-32.el6.tuxcare.els3
1.8.6p3-32.el6.tuxcare.els3
sudo-devel
TuxCare:OracleLinux:6
 before 1.8.6p3-32.el6.tuxcare.els3
1.8.6p3-32.el6.tuxcare.els3
sudo
TuxCare:CentOS:6
 before 1.8.6p3-32.el6.tuxcare.els3
1.8.6p3-32.el6.tuxcare.els3
sudo-devel
TuxCare:CentOS:6
 before 1.8.6p3-32.el6.tuxcare.els3
1.8.6p3-32.el6.tuxcare.els3
sudo
TuxCare:AlmaLinux:9.2
 before 1.9.5p2-9.el9.tuxcare.els1
1.9.5p2-9.el9.tuxcare.els1
sudo-devel
TuxCare:AlmaLinux:9.2
 before 1.9.5p2-9.el9.tuxcare.els1
1.9.5p2-9.el9.tuxcare.els1
sudo-python-plugin
TuxCare:AlmaLinux:9.2
 before 1.9.5p2-9.el9.tuxcare.els1
1.9.5p2-9.el9.tuxcare.els1
sudo
TuxCare:CentOS:7
 before 1.8.23-10.el7_9.3.tuxcare.els2
1.8.23-10.el7_9.3.tuxcare.els2
sudo-devel
TuxCare:CentOS:7
 before 1.8.23-10.el7_9.3.tuxcare.els2
1.8.23-10.el7_9.3.tuxcare.els2
sudo
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 1.8.23-10.el7_9.3.tuxcare.els2
1.8.23-10.el7_9.3.tuxcare.els2
sudo-devel
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 1.8.23-10.el7_9.3.tuxcare.els2
1.8.23-10.el7_9.3.tuxcare.els2
sudo
TuxCare:Debian:10
From an advisory covering 3 CVEs
 before 1.8.27-1+deb10u6+tuxcare.els1
1.8.27-1+deb10u6+tuxcare.els1
sudo-ldap
TuxCare:Debian:10
From an advisory covering 3 CVEs
 before 1.8.27-1+deb10u6+tuxcare.els1
1.8.27-1+deb10u6+tuxcare.els1
sudo
TuxCare:RHEL:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo-devel
TuxCare:RHEL:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo
TuxCare:OracleLinux:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo-devel
TuxCare:OracleLinux:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo
TuxCare:CentOS:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo-devel
TuxCare:CentOS:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo
Debian:12
 All versions, plus listed versions
1.9.13p3-11.9.13p3-1+deb12u11.9.13p3-1+deb12u21.9.13p3-1+deb12u31.9.13p3-1+deb12u4
Show 30 moreShow less
1.9.13p3-21.9.13p3-31.9.14p2-11.9.15p2-11.9.15p2-21.9.15p3-11.9.15p4-11.9.15p4-21.9.15p5-11.9.15p5-21.9.15p5-31.9.15p5-3+hurd.11.9.16-11.9.16-21.9.16p1-11.9.16p2-11.9.16p2-21.9.16p2-31.9.17p1-11.9.17p2-11.9.17p2-1exp11.9.17p2-21.9.17p2-31.9.17p2-41.9.17p2-51.9.17p2-61.9.17p2-71.9.17p2-81.9.17p2-91.9.17p2-9exp1
 None known
sudo
Debian:13
 before 1.9.15p2-2
1.9.15p2-2
sudo
Debian:14
 before 1.9.15p2-2
1.9.15p2-2
sudo
openEuler:20.03-LTS-SP1
 before 1.9.2-15.oe1
1.9.2-15.oe1
sudo
openEuler:20.03-LTS-SP4
 before 1.9.2-15.oe2003sp4
1.9.2-15.oe2003sp4
sudo
openEuler:22.03-LTS
 before 1.9.8p2-16.oe2203sp3
1.9.8p2-16.oe2203sp3
sudo
openEuler:22.03-LTS-SP1
 before 1.9.8p2-15.oe2203sp1
1.9.8p2-15.oe2203sp1
sudo
openEuler:22.03-LTS-SP2
 before 1.9.8p2-16.oe2203sp2
1.9.8p2-16.oe2203sp2
sudo
openEuler:22.03-LTS-SP3
 before 1.9.8p2-16.oe2203sp3
1.9.8p2-16.oe2203sp3
sudo-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-7.el9_0.4
0:1.9.5p2-7.el9_0.4
sudo-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-7.el9_0.4
0:1.9.5p2-7.el9_0.4
sudo-python-plugin
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-7.el9_0.4
0:1.9.5p2-7.el9_0.4
sudo-python-plugin-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-7.el9_0.4
0:1.9.5p2-7.el9_0.4
sudo-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-9.el9_2.2
0:1.9.5p2-9.el9_2.2
sudo-debugsource
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-9.el9_2.2
0:1.9.5p2-9.el9_2.2
sudo-python-plugin
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-9.el9_2.2
0:1.9.5p2-9.el9_2.2
sudo-python-plugin-debuginfo
Red Hat:rhel_eus:9.2::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-9.el9_2.2
0:1.9.5p2-9.el9_2.2
sudo-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-10.el9_3
0:1.9.5p2-10.el9_3
sudo-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-10.el9_3
0:1.9.5p2-10.el9_3
sudo-python-plugin
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-10.el9_3
0:1.9.5p2-10.el9_3
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:1.9.5p2-10.el9_3
0:1.9.5p2-10.el9_3
sudo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_6
0:1.9.5p2-1.el8_6
sudo-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_6
0:1.9.5p2-1.el8_6
sudo-debugsource
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_6
0:1.9.5p2-1.el8_6
sudo
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_8
0:1.9.5p2-1.el8_8
sudo-debuginfo
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_8
0:1.9.5p2-1.el8_8
sudo-debugsource
Red Hat:rhel_eus:8.8::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_8
0:1.9.5p2-1.el8_8
sudo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_9
0:1.9.5p2-1.el8_9
sudo-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_9
0:1.9.5p2-1.el8_9
sudo-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-1.el8_9
0:1.9.5p2-1.el8_9
sudo
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-7.el9_0.4
0:1.9.5p2-7.el9_0.4
sudo-debuginfo
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-7.el9_0.4
0:1.9.5p2-7.el9_0.4
sudo-debugsource
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-7.el9_0.4
0:1.9.5p2-7.el9_0.4
sudo-python-plugin-debuginfo
Red Hat:rhel_eus:9.0::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-7.el9_0.4
0:1.9.5p2-7.el9_0.4
sudo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-9.el9_2.2
0:1.9.5p2-9.el9_2.2
sudo-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-9.el9_2.2
0:1.9.5p2-9.el9_2.2
sudo-debugsource
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-9.el9_2.2
0:1.9.5p2-9.el9_2.2
sudo-python-plugin-debuginfo
Red Hat:rhel_eus:9.2::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-9.el9_2.2
0:1.9.5p2-9.el9_2.2
sudo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-10.el9_3
0:1.9.5p2-10.el9_3
sudo-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-10.el9_3
0:1.9.5p2-10.el9_3
sudo-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-10.el9_3
0:1.9.5p2-10.el9_3
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 3 CVEs
 before 0:1.9.5p2-10.el9_3
0:1.9.5p2-10.el9_3
sudo
Root:Debian:11
 before 1.9.5p2-3+deb11u4.aikido.7
1.9.5p2-3+deb11u4.aikido.71.9.5p2-3+deb11u4.aikido.8
rootio-sudo
Root:Debian:11
 before 1.9.5p2-3+deb11u4.aikido.7
1.9.5p2-3+deb11u4.aikido.71.9.5p2-3+deb11u4.aikido.8
sudo
Root:Debian:12
 before 1.9.13p3-1+deb12u4.aikido.5
1.9.13p3-1+deb12u4.aikido.5
rootio-sudo
Root:Debian:12
 before 1.9.13p3-1+deb12u4.aikido.5
1.9.13p3-1+deb12u4.aikido.5
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.9.5p2-150300.3.33.1
1.9.5p2-150300.3.33.1
sudo
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.9.5p2-150300.3.33.1
1.9.5p2-150300.3.33.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.9.5p2-150300.3.33.1
1.9.5p2-150300.3.33.1
sudo
SUSE:Linux Enterprise Micro 5.1
 before 1.9.5p2-150300.3.33.1
1.9.5p2-150300.3.33.1
sudo
SUSE:Linux Enterprise Micro 5.2
 before 1.9.5p2-150300.3.33.1
1.9.5p2-150300.3.33.1
sudo
SUSE:Enterprise Storage 7.1
 before 1.9.5p2-150300.3.33.1
1.9.5p2-150300.3.33.1
sudo
SUSE:Linux Enterprise Micro 5.5
 before 1.9.12p1-150500.7.10.1
1.9.12p1-150500.7.10.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 1.9.12p1-150500.7.10.1
1.9.12p1-150500.7.10.1
sudo
openSUSE:Leap 15.5
 before 1.9.12p1-150500.7.10.1
1.9.12p1-150500.7.10.1
sudo
SUSE:Linux Enterprise Micro 5.3
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
SUSE:Linux Enterprise Micro 5.4
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
SUSE:Manager Proxy 4.3
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
SUSE:Manager Server 4.3
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
openSUSE:Leap Micro 5.3
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
openSUSE:Leap Micro 5.4
 before 1.9.9-150400.4.36.1
1.9.9-150400.4.36.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.8.27-150000.4.53.1
1.8.27-150000.4.53.1
sudo
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.8.27-150000.4.53.1
1.8.27-150000.4.53.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.8.27-150000.4.53.1
1.8.27-150000.4.53.1
sudo
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.8.27-4.48.2
1.8.27-4.48.2
sudo
SUSE:Linux Enterprise Server 12 SP5
 before 1.8.27-4.48.2
1.8.27-4.48.2
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.8.27-4.48.2
1.8.27-4.48.2
sudo
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.9.15p2-1.1
1.9.15p2-1.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-42465 is a high vulnerability (CVSS 7.0) in Sudo Project Sudo, published December 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.55%, the 45th percentile. Fixed in sudo 1.9.15p5-1.

References

Show 66 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open