Every CVE Search/ Get API key

CVE-2019-18634

In Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based...

7.8 HighPublic exploitFix available

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

19.3%Down 1.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Record
CVE-2019-18634
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Record
CVE-2019-18634
Updated
2026-11-02
EUVDEUVD-2019-8357 No score

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Record
EUVD-2019-8357
Updated
2026-11-03
GitHub AdvisoriesGHSA-rjv5-9w4p-4jrw No score

In Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based...

In Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Record
GHSA-rjv5-9w4p-4jrw
Updated
2026-11-02
OSVALPINE-CVE-2019-18634 7.8

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Record
ALPINE-CVE-2019-18634
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2019-18634 7.8

CVE-2019-18634 does not affect BellSoft software

Record
BELL-CVE-2019-18634
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 17 moreShow less
OSV 7.8

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Record
CVE-2019-18634
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2019-18634 7.8

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Record
DEBIAN-CVE-2019-18634
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:0487 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2020:0487
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:0509 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2020:0509
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:0540 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2020:0540
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:0726 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2020:0726
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-18634 7.8

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Record
UBUNTU-CVE-2019-18634
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2020-0081 No score

Updated sudo packages fix security vulnerability

The updated packages fix a security vulnerability:

In Sudo before 1.8.31, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c. (CVE-2019-18634)

Record
MGASA-2020-0081
Updated
2026-11-02
OSVopenSUSE-SU-2020:0244-1 No score

Security update for sudo

This update for sudo fixes the following issues:

Security issue fixed:

  • CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202).

Non-security issue fixed:

  • Fixed an issue where sudo -l would ask for a password even though listpw was set to never (bsc#1162675).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:0244-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11413-1 No score

sudo-1.9.7p2-1.4 on GA media

These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11413-1
Updated
2026-11-02
OSVSUSE-SU-2020:0390-1 No score

Security update for sudo

This update for sudo fixes the following issue:

Security issue fixed:

  • CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202).
Record
SUSE-SU-2020:0390-1
Updated
2026-11-02
OSVSUSE-SU-2020:0406-1 No score

Security update for sudo

This update for sudo fixes the following issues:

Security issue fixed:

  • CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202).

Non-security issue fixed:

  • Fixed an issue where sudo -l would ask for a password even though listpw was set to never (bsc#1162675).
Record
SUSE-SU-2020:0406-1
Updated
2026-11-02
OSVSUSE-SU-2020:0407-1 No score

Security update for sudo

This update for sudo fixes the following issue:

Security issue fixed:

  • CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202).
Record
SUSE-SU-2020:0407-1
Updated
2026-11-02
OSVSUSE-SU-2020:0408-1 No score

Security update for sudo

This update for sudo fixes the following issues:

Security issue fixed:

  • CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202).

Non-security issue fixed:

  • Fixed an issue where sudo -l would ask for a password even though listpw was set to never (bsc#1162675).
Record
SUSE-SU-2020:0408-1
Updated
2026-11-02
OSVSUSE-SU-2020:0409-1 No score

Security update for sudo

This update for sudo fixes the following issues:

Security issue fixed:

  • CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202).

Non-security issue fixed:

  • Fixed an issue where sudo -l would ask for a password even though listpw was set to never (bsc#1162675).
Record
SUSE-SU-2020:0409-1
Updated
2026-11-02
OSVUSN-4263-1 No score

sudo vulnerability

Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this issue to obtain unintended access to the administrator account.

Record
USN-4263-1
Updated
2026-11-02
OSVUSN-4263-2 No score

sudo vulnerability

USN-4263-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this issue to obtain unintended access to the administrator account.

Record
USN-4263-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sudo
Alpine:v3.10
 1.7.1 up to 1.8.27-r2
1.8.27-r2
sudo
Alpine:v3.11
 1.7.1 up to 1.8.29-r2
1.8.29-r2
sudo
Alpine:v3.12
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.13
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.14
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.15
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.16
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.17
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.18
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.19
 1.7.1 up to 1.8.31-r0
1.8.31-r0
Show 74 moreShow less
Affected packages
PackageAffectedFixed
sudo
Alpine:v3.20
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.21
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.22
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.23
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.24
 1.7.1 up to 1.8.31-r0
1.8.31-r0
sudo
Alpine:v3.8
 1.7.1 up to 1.8.23-r4
1.8.23-r4
sudo
Alpine:v3.9
 1.7.1 up to 1.8.25_p1-r3
1.8.25_p1-r3
sudo
Debian:12
 before 1.8.31-1
1.8.31-1
sudo
Debian:13
 before 1.8.31-1
1.8.31-1
sudo
Debian:14
 before 1.8.31-1
1.8.31-1
sudo
Debian:8
 before 1.8.10p3-1+deb8u7, plus listed versions
1.8.10p3-1+deb8u21.8.10p3-1+deb8u31.8.10p3-1+deb8u41.8.10p3-1+deb8u51.8.10p3-1+deb8u6
1.8.10p3-1+deb8u7
sudo
Debian:9
 before 1.8.19p1-2.1+deb9u2, plus listed versions
1.8.19p1-2.11.8.19p1-2.1+deb9u1
1.8.19p1-2.1+deb9u2
sudo
Mageia:7
 before 1.8.28-1.1.mga7
1.8.28-1.1.mga7
sudo
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.25p1-8.el8_1.1
0:1.8.25p1-8.el8_1.1
sudo-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.25p1-8.el8_1.1
0:1.8.25p1-8.el8_1.1
sudo-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.25p1-8.el8_1.1
0:1.8.25p1-8.el8_1.1
sudo
Red Hat:rhel_e4s:8.0::baseos
 before 0:1.8.25p1-4.el8_0.3
0:1.8.25p1-4.el8_0.3
sudo-debuginfo
Red Hat:rhel_e4s:8.0::baseos
 before 0:1.8.25p1-4.el8_0.3
0:1.8.25p1-4.el8_0.3
sudo-debugsource
Red Hat:rhel_e4s:8.0::baseos
 before 0:1.8.25p1-4.el8_0.3
0:1.8.25p1-4.el8_0.3
sudo
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo-devel
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo
Red Hat:enterprise_linux:7::computenode
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo-devel
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-4.el7_7.2
0:1.8.23-4.el7_7.2
sudo
Red Hat:enterprise_linux:6::client
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo-devel
Red Hat:enterprise_linux:6::client
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo
Red Hat:enterprise_linux:6::server
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo-devel
Red Hat:enterprise_linux:6::server
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.8.6p3-29.el6_10.3
0:1.8.6p3-29.el6_10.3
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 1.8.10p3-2.32.1
1.8.10p3-2.32.1
sudo
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 1.8.10p3-2.32.1
1.8.10p3-2.32.1
sudo
SUSE:HPE Helion OpenStack 8
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:OpenStack Cloud 8
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:OpenStack Cloud Crowbar 8
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:Linux Enterprise Desktop 12 SP4
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:Linux Enterprise Software Development Kit 12 SP4
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:Linux Enterprise Server 12 SP4
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:Enterprise Storage 5
 before 1.8.20p2-3.17.1
1.8.20p2-3.17.1
sudo
SUSE:OpenStack Cloud 7
 before 1.8.10p3-10.26.1
1.8.10p3-10.26.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.8.10p3-10.26.1
1.8.10p3-10.26.1
sudo
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1.8.10p3-10.26.1
1.8.10p3-10.26.1
sudo
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.8.10p3-10.26.1
1.8.10p3-10.26.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15
 before 1.8.22-4.9.1
1.8.22-4.9.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP1
 before 1.8.22-4.9.1
1.8.22-4.9.1
sudo
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 1.8.22-4.9.1
1.8.22-4.9.1
sudo
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 1.8.22-4.9.1
1.8.22-4.9.1
sudo
SUSE:Linux Enterprise Server 15-LTSS
 before 1.8.22-4.9.1
1.8.22-4.9.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.8.22-4.9.1
1.8.22-4.9.1
sudo
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.8.27-4.3.1
1.8.27-4.3.1
sudo
SUSE:Linux Enterprise Server 12 SP5
 before 1.8.27-4.3.1
1.8.27-4.3.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.8.27-4.3.1
1.8.27-4.3.1
sudo
Ubuntu:Pro:14.04:LTS
 before 1.8.9p5-1ubuntu1.5+esm3, plus listed versions
1.8.6p3-0ubuntu31.8.8-2ubuntu11.8.8-2ubuntu21.8.9p4-1ubuntu11.8.9p4-1ubuntu2
Show 7 moreShow less
1.8.9p5-1ubuntu11.8.9p5-1ubuntu1.11.8.9p5-1ubuntu1.21.8.9p5-1ubuntu1.31.8.9p5-1ubuntu1.41.8.9p5-1ubuntu1.5+esm11.8.9p5-1ubuntu1.5+esm2
1.8.9p5-1ubuntu1.5+esm3
sudo
Ubuntu:16.04:LTS
 before 1.8.16-0ubuntu1.9, plus listed versions
1.8.12-1ubuntu31.8.16-0ubuntu11.8.16-0ubuntu1.11.8.16-0ubuntu1.21.8.16-0ubuntu1.3
Show 5 moreShow less
1.8.16-0ubuntu1.41.8.16-0ubuntu1.51.8.16-0ubuntu1.61.8.16-0ubuntu1.71.8.16-0ubuntu1.8
1.8.16-0ubuntu1.9
sudo
Ubuntu:18.04:LTS
 before 1.8.21p2-3ubuntu1.2, plus listed versions
1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.1
1.8.21p2-3ubuntu1.2
sudo
openSUSE:Leap 15.1
 before 1.8.22-lp151.5.6.1
1.8.22-lp151.5.6.1
sudo
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 1.9.7p2-1.4
1.9.7p2-1.4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSudo 1.8.25p - 'pwfeedback' Buffer Overflow (PoC)2020-02-04
Exploit-DBSudo 1.8.25p - 'pwfeedback' Buffer Overflow2020-02-06
PoC in GitHubPlazmaz/CVE-2019-186342020-02-07
PoC in GitHubsaleemrashid/sudo-cve-2019-186342020-02-07
PoC in GitHubN1et/CVE-2019-186342020-02-13
PoC in GitHubdukptkey/CVE-2019-186342020-03-09
PoC in GitHubedsonjt81/sudo-cve-2019-186342021-04-25
PoC in GitHubparas1te-x/CVE-2019-186342021-05-05
PoC in GitHubaesophor/CVE-2019-186342021-08-01
PoC in GitHubDDayLuong/CVE-2019-186342023-12-27
Show 6 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubchanbakjsd/CVE-2019-186342024-04-14
PoC in GitHubl0w3/CVE-2019-186342024-12-11
PoC in GitHubngyinkit/cve-2019-186342025-04-11
PoC in GitHubletsr00t/-CVE-2019-18634-sudo-pwfeedback2025-11-08
PoC in GitHubDevTeam6Rabbit/CVE-2019-18634-writeup2026-01-07
PoC in GitHubMoscvv/thm-cybersec-portfolio2026-06-17

History

History
RecordedChangedSources
affected, facts
affected, exploitsOSV
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-18634 is a high vulnerability (CVSS 7.8) in Debian Linux, published January 29, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 19.3%, the 97th percentile. Fixed in sudo 1.8.27-r2.

References

Show 58 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open