{"id":"CVE-2015-8239","aliases":["DEBIAN-CVE-2015-8239","EUVD-2015-8127","GHSA-w2j3-vrwq-vgh5","MGASA-2016-0261","UBUNTU-CVE-2015-8239"],"status":"published","title":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write...","description":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.","severity":{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00542,"percentile":0.45831,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-362"],"published":"2016-07-26T21:16:28Z","modified":"2026-09-09T07:01:51Z","exploits":[{"source":"pocgithub","id":"justinsteven/sudo_digest_toctou_poc_CVE-2015-8239","title":"justinsteven/sudo_digest_toctou_poc_CVE-2015-8239","date":"2021-01-15","url":"https://github.com/justinsteven/sudo_digest_toctou_poc_CVE-2015-8239"}],"fixes":[{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.8.17p1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.8.17p1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.8.17p1-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"sudo","fixed_in":["1.8.17p1-1.mga5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.17p1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.17p1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.17p1-1"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.17p1-1.mga5"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5","1.8.9p5-1ubuntu1.5+esm6","1.8.9p5-1ubuntu1.5+esm7","1.8.9p5-1ubuntu1.5+esm8"]}],"products":[{"vendor":"sudo_project","product":"sudo"}],"references":[{"url":"https://www.sudo.ws/repos/sudo/rev/397722cdd7ec","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://www.sudo.ws/repos/sudo/rev/0cd3cc8fa195","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1283635","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/11/18/22","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"https://www.sudo.ws/repos/sudo/rev/24a3d9215c64","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8239"},{"url":"https://github.com/advisories/GHSA-w2j3-vrwq-vgh5"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8239","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0261.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18989","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/BLFXPDF67QZECU6EMPWYU4FGK6PNZ3M4/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-8239","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/11/10/2","tags":["report"]},{"url":"https://www.sudo.ws/stable.html#1.8.16","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8239","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-8239","description":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.","status":"published","published":"2017-10-10T16:00:00Z","modified":"2024-08-06T08:13:32.035Z","updated_at":"2026-11-02T14:35:40.900357Z"}],"euvd":[{"id":"EUVD-2015-8127","description":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.","status":"published","published":"2017-10-10T16:00:00Z","modified":"2024-08-06T08:13:32Z","updated_at":"2026-11-03T01:57:27.742981Z"}],"ghsa":[{"id":"GHSA-w2j3-vrwq-vgh5","title":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write...","description":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.","status":"published","published":"2022-05-17T00:26:27Z","modified":"2023-02-03T05:01:43Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:53:01.625617Z"}],"nvd":[{"id":"CVE-2015-8239","description":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.","status":"published","published":"2017-10-10T16:29:00.557Z","modified":"2026-06-17T00:34:12.053Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:03:19.244941Z"}],"osv":[{"id":"CVE-2015-8239","description":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.","status":"published","published":"2017-10-10T16:29:00Z","modified":"2026-04-16T06:24:53.666587476Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-8239","description":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.","status":"published","published":"2017-10-10T16:29:00.557Z","modified":"2026-09-09T07:01:51.973763094Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"UBUNTU-CVE-2015-8239","description":"The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.","status":"published","published":"2017-10-10T16:29:00Z","modified":"2025-09-08T16:43:29Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:10.737723Z"},{"id":"MGASA-2016-0261","title":"Updated sudo packages fix security vulnerability","description":"A vulnerability in functionality for adding support of SHA-2 digests along\nwith the command was found. The sudoers plugin performs this digest\nverification while matching rules, and later independently calls execve()\nto execute the binary. This results in a race condition if the digest\nfunctionality is used as suggested (in fact, the rules are matched before\nthe user is prompted for a password, so there is not negligible time frame\nto replace the binary from underneath sudo) (CVE-2015-8239).\n","status":"published","published":"2016-07-26T21:16:28Z","modified":"2026-04-16T06:23:45.616074665Z","updated_at":"2026-11-02T15:49:40.103088Z"}]}}