USN-7867-1
rust-sudo-rs vulnerabilities
It was discovered that sudo-rs incorrectly handled passwords when timeouts occurred and the pwfeedback default was not set. This could result in a partially typed password being output to standard input, contrary to expectations.
It was discovered that sudo-rs incorrectly handled the targetpw and rootpw default settings when creating timestamp files. A local attacker could possibly use this issue to bypass authentication in certain configurations.
What each source reports
OSV No score
rust-sudo-rs vulnerabilities
It was discovered that sudo-rs incorrectly handled passwords when timeouts occurred and the pwfeedback default was not set. This could result in a partially typed password being output to standard input, contrary to expectations.
It was discovered that sudo-rs incorrectly handled the targetpw and rootpw default settings when creating timestamp files. A local attacker could possibly use this issue to bypass authentication in certain configurations.
- Record
USN-7867-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rust-sudo-rsUbuntu:25.10 |
before 0.2.8-1ubuntu5.2, plus listed versions 0.2.4-10.2.5-3ubuntu10.2.5-40.2.5-50.2.5-5ubuntu1 Show 6 moreShow less0.2.5-5ubuntu30.2.8-1ubuntu20.2.8-1ubuntu30.2.8-1ubuntu40.2.8-1ubuntu50.2.8-1ubuntu5.1 |
0.2.8-1ubuntu5.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-7867-1 is a vulnerability with no CVSS score yet in rust-sudo-rs, published November 10, 2025. No source lists public exploit code. Fixed in rust-sudo-rs 0.2.8-1ubuntu5.2.