{"id":"CVE-2023-22809","aliases":["ALPINE-CVE-2023-22809","ALSA-2023:0282","ALSA-2023:0284","AZL-13030","BELL-CVE-2023-22809","CLSA-2023-1675984342","CLSA-2023-1675984682","CLSA-2023-1675985375","CLSA-2023-1675985571","CLSA-2023-1675986271","DEBIAN-CVE-2023-22809","DLA-3272-1","DSA-5321-1","EUVD-2023-26921","GHSA-3vwp-294x-6v9c","MGASA-2023-0025","OESA-2023-1049","RHSA-2023:0280","RHSA-2023:0281","RHSA-2023:0282","RHSA-2023:0283","RHSA-2023:0284","RHSA-2023:0287","RHSA-2023:0291","RHSA-2023:0292","RHSA-2023:0293","RHSA-2023:0859","RHSA-2023:3262","RHSA-2023:3264","RHSA-2023:3276","RLSA-2023:0282","RLSA-2023:0284","SUSE-SU-2023:0100-1","SUSE-SU-2023:0101-1","SUSE-SU-2023:0114-1","SUSE-SU-2023:0115-1","SUSE-SU-2023:0116-1","SUSE-SU-2023:0117-1","UBUNTU-CVE-2023-22809","USN-5811-1","USN-5811-2","USN-5811-3","openSUSE-SU-2024:12638-1"],"status":"published","title":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the...","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.55367,"percentile":0.9904,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-269"],"published":"2023-01-18T00:00:00Z","modified":"2026-11-03T06:32:58Z","exploits":[{"source":"metasploit","id":"exploit/linux/local/sudoedit_bypass_priv_esc","title":"Sudoedit Extra Arguments Priv Esc","type":"exploit","platform":"Linux","date":"2023-01-18","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/sudoedit_bypass_priv_esc"},{"source":"pocgithub","id":"n3m1sys/CVE-2023-22809-sudoedit-privesc","title":"n3m1sys/CVE-2023-22809-sudoedit-privesc","date":"2023-01-21","url":"https://github.com/n3m1sys/CVE-2023-22809-sudoedit-privesc"},{"source":"pocgithub","id":"M4fiaB0y/CVE-2023-22809","title":"M4fiaB0y/CVE-2023-22809","date":"2023-02-22","url":"https://github.com/M4fiaB0y/CVE-2023-22809"},{"source":"exploitdb","id":"EDB-51217","title":"sudo 1.8.0 to 1.9.12p1 - Privilege Escalation","type":"local","platform":"linux","date":"2023-04-03","url":"https://www.exploit-db.com/exploits/51217"},{"source":"pocgithub","id":"P4x1s/CVE-2023-22809-sudo-POC","title":"P4x1s/CVE-2023-22809-sudo-POC","date":"2023-04-06","url":"https://github.com/P4x1s/CVE-2023-22809-sudo-POC"},{"source":"pocgithub","id":"hello4r1end/patch_CVE-2023-22809","title":"hello4r1end/patch_CVE-2023-22809","date":"2023-06-08","url":"https://github.com/hello4r1end/patch_CVE-2023-22809"},{"source":"pocgithub","id":"Chan9Yan9/CVE-2023-22809","title":"Chan9Yan9/CVE-2023-22809","date":"2023-06-20","url":"https://github.com/Chan9Yan9/CVE-2023-22809"},{"source":"pocgithub","id":"pashayogi/CVE-2023-22809","title":"pashayogi/CVE-2023-22809","date":"2023-06-25","url":"https://github.com/pashayogi/CVE-2023-22809"},{"source":"pocgithub","id":"asepsaepdin/CVE-2023-22809","title":"asepsaepdin/CVE-2023-22809","date":"2023-07-10","url":"https://github.com/asepsaepdin/CVE-2023-22809"},{"source":"pocgithub","id":"Toothless5143/CVE-2023-22809","title":"Toothless5143/CVE-2023-22809","date":"2023-08-06","url":"https://github.com/Toothless5143/CVE-2023-22809"},{"source":"pocgithub","id":"laxmiyamkolu/SUDO-privilege-escalation","title":"laxmiyamkolu/SUDO-privilege-escalation","date":"2024-08-26","url":"https://github.com/laxmiyamkolu/SUDO-privilege-escalation"},{"source":"pocgithub","id":"D0rDa4aN919/CVE-2023-22809-Exploiter","title":"D0rDa4aN919/CVE-2023-22809-Exploiter","date":"2024-08-28","url":"https://github.com/D0rDa4aN919/CVE-2023-22809-Exploiter"},{"source":"pocgithub","id":"Spydomain/CVE-2023-22809-automated-python-exploits","title":"Spydomain/CVE-2023-22809-automated-python-exploits","date":"2025-07-30","url":"https://github.com/Spydomain/CVE-2023-22809-automated-python-exploits"},{"source":"pocgithub","id":"ValeuDoamne/CVE-2023-22809","title":"ValeuDoamne/CVE-2023-22809","date":"2026-01-14","url":"https://github.com/ValeuDoamne/CVE-2023-22809"}],"fixes":[{"ecosystem":"Alpine:v3.14","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"sudo","fixed_in":["1.9.12_p2-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"sudo","fixed_in":["1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"sudo-python-plugin","fixed_in":["1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"sudo","fixed_in":["1.8.29-8.el8_7.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"sudo","fixed_in":["1.9.12p2-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"sudo","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"sudo-devel","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"sudo","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"sudo-devel","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"sudo","fixed_in":["1.8.16-0ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"sudo-ldap","fixed_in":["1.8.16-0ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"sudo","fixed_in":["1.8.6p3-32.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"sudo-devel","fixed_in":["1.8.6p3-32.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"sudo","fixed_in":["1.8.6p3-32.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"sudo-devel","fixed_in":["1.8.6p3-32.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.9.12p2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.9.12p2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.9.12p2-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"sudo","fixed_in":["1.8.27-1+deb10u5"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"sudo","fixed_in":["1.9.5p2-3+deb11u1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"sudo","fixed_in":["1.9.5p2-2.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"sudo","fixed_in":["1.9.2-10.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"sudo","fixed_in":["1.9.2-10.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"sudo","fixed_in":["1.9.8p2-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"sudo","fixed_in":["1.9.8p2-9.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"sudo","fixed_in":["0:1.8.25p1-8.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.25p1-8.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.25p1-8.el8_1.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-7.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-7.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-python-plugin","fixed_in":["0:1.9.5p2-7.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-7.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo","fixed_in":["0:1.9.5p2-7.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-7.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-7.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-7.el9_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo","fixed_in":["0:1.8.29-8.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-8.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-8.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","fixed_in":["0:1.8.29-8.el8_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-8.el8_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-8.el8_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"sudo","fixed_in":["0:1.8.6p3-29.el6_10.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"sudo-debuginfo","fixed_in":["0:1.8.6p3-29.el6_10.7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"sudo-devel","fixed_in":["0:1.8.6p3-29.el6_10.7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"sudo","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"sudo","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-5.el8_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"sudo","fixed_in":["0:1.8.29-7.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-7.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-7.el8_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"sudo","fixed_in":["0:1.8.23-3.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-3.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.6::server","package":"sudo-devel","fixed_in":["0:1.8.23-3.el7_6.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo","fixed_in":["0:1.8.19p2-12.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-12.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-devel","fixed_in":["0:1.8.19p2-12.el7_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.7::server","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.7::server","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.4"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"sudo","fixed_in":["0:1.9.5p2-7.el9_1.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"sudo","fixed_in":["0:1.8.29-8.el8_7.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","fixed_in":["1.8.10p3-10.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"sudo","fixed_in":["1.8.20p2-3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"sudo","fixed_in":["1.8.20p2-3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sudo","fixed_in":["1.8.20p2-3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"sudo","fixed_in":["1.8.20p2-3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sudo","fixed_in":["1.9.9-150400.4.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"sudo","fixed_in":["1.9.9-150400.4.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"sudo","fixed_in":["1.9.9-150400.4.12.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"sudo","fixed_in":["1.9.9-150400.4.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.2","package":"sudo","fixed_in":["1.9.5p2-150300.3.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"sudo","fixed_in":["1.8.27-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"sudo","fixed_in":["1.8.27-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"sudo","fixed_in":["1.8.27-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"sudo","fixed_in":["1.8.27-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"sudo","fixed_in":["1.8.27-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"sudo","fixed_in":["1.8.27-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"sudo","fixed_in":["1.8.27-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"sudo","fixed_in":["1.8.27-150000.4.38.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"sudo","fixed_in":["1.8.27-4.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"sudo","fixed_in":["1.8.27-4.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"sudo","fixed_in":["1.8.27-4.33.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","fixed_in":["1.8.9p5-1ubuntu1.5+esm7"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sudo","fixed_in":["1.8.16-0ubuntu1.10+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"sudo","fixed_in":["1.8.21p2-3ubuntu1.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"sudo","fixed_in":["1.8.31-1ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"sudo","fixed_in":["1.9.9-1ubuntu2.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"sudo","fixed_in":["1.9.12p2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.0"},{"fixed":"1.9.12_p2-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-8.el8_7.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p2-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"sudo-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p2-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1+deb10u5"}]}],"versions":["1.8.27-1","1.8.27-1+deb10u1","1.8.27-1+deb10u2","1.8.27-1+deb10u3","1.8.27-1+deb10u4"]},{"source":"osv","ecosystem":"Debian:11","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-3+deb11u1"}]}],"versions":["1.9.5p2-3"]},{"source":"osv","ecosystem":"Mageia:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-2.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-10.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-10.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-9.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.1::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-8.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-8.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-8.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-8.el8_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-8.el8_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-8.el8_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.2::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.2::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.3-202302150956_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.3-202302150956_8.6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.6::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.7::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.7::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.7::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.4"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_1.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-8.el8_7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.12.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.38.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.33.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9p5-1ubuntu1.5+esm7"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5","1.8.9p5-1ubuntu1.5+esm6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.10+esm1"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7","1.8.16-0ubuntu1.8","1.8.16-0ubuntu1.9","1.8.16-0ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.5"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1","1.8.21p2-3ubuntu1.1","1.8.21p2-3ubuntu1.2","1.8.21p2-3ubuntu1.3","1.8.21p2-3ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.4"}]}],"versions":["1.8.27-1ubuntu4","1.8.29-1ubuntu1","1.8.31-1ubuntu1","1.8.31-1ubuntu1.1","1.8.31-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1ubuntu2.2"}]}],"versions":["1.9.5p2-3ubuntu2","1.9.9-1ubuntu2","1.9.9-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.5"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1","1.8.21p2-3ubuntu1.1","1.8.21p2-3ubuntu1.2","1.8.21p2-3ubuntu1.3","1.8.21p2-3ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.4"}]}],"versions":["1.8.27-1ubuntu4","1.8.29-1ubuntu1","1.8.31-1ubuntu1","1.8.31-1ubuntu1.1","1.8.31-1ubuntu1.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1ubuntu2.2"}]}],"versions":["1.9.5p2-3ubuntu2","1.9.9-1ubuntu2","1.9.9-1ubuntu2.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.10+esm1"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7","1.8.16-0ubuntu1.8","1.8.16-0ubuntu1.9","1.8.16-0ubuntu1.10"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9p5-1ubuntu1.5+esm7"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5","1.8.9p5-1ubuntu1.5+esm6"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p2-1.1"}]}]}],"products":[{"vendor":"apple","product":"macos"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"sudo_project","product":"sudo"}],"references":[{"url":"https://www.synacktiv.com/sites/default/files/2023-01/sudo-CVE-2023-22809.pdf","tags":["x_transferred","Exploit","Mitigation","Technical Description","Third Party Advisory","web"]},{"url":"https://www.sudo.ws/security/advisories/sudoedit_any/","tags":["x_transferred","Exploit","Mitigation","Vendor Advisory","advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00012.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2023/dsa-5321","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/01/19/1","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/","tags":["vendor-advisory","x_transferred","Mailing List","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230127-0015/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ/","tags":["vendor-advisory","x_transferred","Mailing List","advisory"]},{"url":"http://packetstormsecurity.com/files/171644/sudo-1.9.12p1-Privilege-Escalation.html","tags":["x_transferred","Third Party Advisory","VDB Entry","web"]},{"url":"https://security.gentoo.org/glsa/202305-12","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT213758","tags":["x_transferred","Third Party Advisory","web"]},{"url":"http://packetstormsecurity.com/files/172509/Sudoedit-Extra-Arguments-Privilege-Escalation.html","tags":["x_transferred","Third Party Advisory","VDB Entry","web"]},{"url":"http://seclists.org/fulldisclosure/2023/Aug/21","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"http://packetstormsecurity.com/files/174234/Cisco-ThousandEyes-Enterprise-Agent-Virtual-Appliance-Arbitrary-File-Modification.html","tags":["x_transferred","Third Party Advisory","VDB Entry","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22809","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ"},{"url":"https://security.netapp.com/advisory/ntap-20230127-0015"},{"url":"https://www.sudo.ws/security/advisories/sudoedit_any"},{"url":"https://github.com/advisories/GHSA-3vwp-294x-6v9c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-22809","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0282","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22809","tags":["report"]},{"url":"https://bugzilla.redhat.com/2161142","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-0282.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0284","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-0284.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-22809","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1675984342.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1675984682.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1675985375","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1675985571.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1675986271.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22809.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-22809","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0025.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31437","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5811-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1049","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0280","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161142","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0280.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22809","tags":["advisory","report"]},{"url":"https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_12p2","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0281","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0281.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0282.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0283","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0283.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0284.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0287","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0287.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0291","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0291.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0292","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0292.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0293","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0293.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:0859","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2147572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169971","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0859.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4139","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4139","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4139","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/11/30/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-47629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-47629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-47629","tags":["advisory"]},{"url":"https://gnupg.org/blog/20221017-pepe-left-the-ksba.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3262","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3262.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3264","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3264.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3276","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3276.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0282","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:0284","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230100-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207082","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22809","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230101-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230114-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230115-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230116-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206170","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230117-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-22809","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5811-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5811-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-33070","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-22809","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T00:00:00Z","modified":"2025-04-04T15:45:24.835Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:35:16.126506Z"}],"euvd":[{"id":"EUVD-2023-26921","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T00:00:00Z","modified":"2025-04-04T15:45:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:42.420681Z"}],"ghsa":[{"id":"GHSA-3vwp-294x-6v9c","title":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the...","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T18:30:16Z","modified":"2025-04-04T18:30:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:00:48.250813Z"}],"nvd":[{"id":"CVE-2023-22809","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T17:15:10.353Z","modified":"2026-06-17T05:36:13.303Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:07:45.305824Z"}],"osv":[{"id":"ALPINE-CVE-2023-22809","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T17:15:10.353Z","modified":"2026-11-03T06:32:58.901665698Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"AZL-13030","title":"CVE-2023-22809 affecting package sudo for versions less than 1.9.12p2-1","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T17:15:10Z","modified":"2026-04-21T04:22:34.297647Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"BELL-CVE-2023-22809","title":"CVE-2023-22809 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:24.719392Z","modified":"2026-01-26T09:46:37.096546Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-22809","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T00:00:00Z","modified":"2026-10-28T02:30:59.10721906Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:30.334753Z"},{"id":"DEBIAN-CVE-2023-22809","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T17:15:10.353Z","modified":"2026-10-26T18:01:36.11147007Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.369204Z"},{"id":"OESA-2023-1049","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\r\n\r\nIn Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \u0026quot;--\u0026quot; argument that defeats a protection mechanism, e.g., an EDITOR=\u0026apos;vim -- /path/to/extra/file\u0026apos; value.(CVE-2023-22809)","status":"published","published":"2023-02-03T11:05:31Z","modified":"2026-08-18T01:17:29.387704525Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2023:0280","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:29:50Z","modified":"2026-08-07T10:07:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0281","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:30:00Z","modified":"2026-08-07T10:07:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0282","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:29:25Z","modified":"2026-08-07T10:07:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0283","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:28:54Z","modified":"2026-08-07T10:07:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0284","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:29:35Z","modified":"2026-08-07T10:07:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0287","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:29:13Z","modified":"2026-08-07T10:07:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0291","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:30:09Z","modified":"2026-08-07T10:07:42Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0292","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:29:03Z","modified":"2026-08-07T10:07:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0293","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:30:19Z","modified":"2026-08-07T10:07:43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:0859","title":"Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update batch#4 (oVirt-4.5.3-4)","status":"published","published":"2024-09-16T10:30:27Z","modified":"2026-08-07T10:07:50Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:3262","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:29:11Z","modified":"2026-08-07T10:08:36Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:3264","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:29:21Z","modified":"2026-08-07T10:08:36Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RHSA-2023:3276","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T10:29:01Z","modified":"2026-08-07T10:08:37Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"RLSA-2023:0282","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T08:22:52Z","modified":"2026-02-05T05:30:11.642041Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2023:0284","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T08:23:15Z","modified":"2026-02-04T07:40:24.429861Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2023-22809","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.","status":"published","published":"2023-01-18T00:00:00Z","modified":"2026-02-04T03:29:23.381901Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"ALSA-2023:0282","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T00:00:00Z","modified":"2026-10-29T11:31:21.799567763Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:0284","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: arbitrary file write with privileges of the RunAs user (CVE-2023-22809)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2023-01-23T00:00:00Z","modified":"2026-10-29T11:01:59.458038625Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2023-1675984342","title":"sudo: Fix of CVE-2023-22809","description":"- CVE-2023-22809: do not permit editor arguments to include \"--\"","status":"published","published":"2023-02-09T23:12:22Z","modified":"2026-06-01T00:33:20.25127741Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1675984682","title":"sudo: Fix of CVE-2023-22809","description":"- CVE-2023-22809: do not permit editor arguments to include \"--\"","status":"published","published":"2023-02-09T23:18:02Z","modified":"2026-06-01T00:33:21.704732508Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1675985375","title":"Fix CVE(s): CVE-2023-22809","description":"\n   * SECURITY UPDATE: edit a file not permitted by the security policy\n     - debian/patches/CVE-2023-22809.patch: do not permit editor\n       arguments to include \"--\"\n     - CVE-2023-22809","status":"published","published":"2023-02-09T23:29:35Z","modified":"2026-06-04T10:04:11.010811Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1675985571","title":"sudo: Fix of CVE-2023-22809","description":"- CVE-2023-22809: do not permit editor arguments to include \"--\" for sudoedit\n - build tests have been enabled","status":"published","published":"2023-02-09T23:32:51Z","modified":"2026-06-01T00:33:15.840283166Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1675986271","title":"sudo: Fix of CVE-2023-22809","description":"- CVE-2023-22809: do not permit editor arguments to include \"--\" for sudoedit\n - build tests have been enabled","status":"published","published":"2023-02-09T23:44:31Z","modified":"2026-06-01T00:33:24.728318804Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"DLA-3272-1","title":"sudo - security update","status":"published","published":"2023-01-18T00:00:00Z","modified":"2026-03-09T01:21:35.738045Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DSA-5321-1","title":"sudo - security update","status":"published","published":"2023-01-18T00:00:00Z","modified":"2026-03-09T02:09:19.913063Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2023-0025","title":"Updated sudo packages fix security vulnerability","description":"In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra\narguments passed in the user-provided environment variables (SUDO_EDITOR,\nVISUAL, and EDITOR), allowing a local attacker to append arbitrary entries\nto the list of files to process. This can lead to privilege escalation.\nAffected versions are 1.8.0 through 1.9.12.p1. The problem exists because\na user-specified editor may contain a \"--\" argument that defeats a\nprotection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file'\nvalue. (CVE-2023-22809)\n","status":"published","published":"2023-01-24T07:58:25Z","modified":"2026-04-16T04:40:49.147508987Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12638-1","title":"sudo-1.9.12p2-1.1 on GA media","description":"These are all security issues fixed in the sudo-1.9.12p2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:45:00.91754Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0100-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-22809: Fixed an arbitrary file write issue that could be\n  exploited by users with sudoedit permissions (bsc#1207082).\n","status":"published","published":"2023-01-19T09:27:49Z","modified":"2025-05-02T04:34:36.090223Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0101-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-22809: Fixed an arbitrary file write issue that could be\n  exploited by users with sudoedit permissions (bsc#1207082).\n","status":"published","published":"2023-01-19T11:13:39Z","modified":"2026-02-04T03:11:19.79574Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0114-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-22809: Fixed an arbitrary file write issue that could be\n  exploited by users with sudoedit permissions (bsc#1207082).\n","status":"published","published":"2023-01-20T09:23:06Z","modified":"2026-02-04T02:19:53.866992Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0115-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-22809: Fixed an arbitrary file write issue that could be\n  exploited by users with sudoedit permissions (bsc#1207082).\n","status":"published","published":"2023-01-20T09:23:59Z","modified":"2026-02-04T02:22:46.148558Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0116-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-22809: Fixed an arbitrary file write issue that could be\n  exploited by users with sudoedit permissions (bsc#1207082).\n\nOther fixes:\n\n- Fixed a potential crash while using the sssd plugin (bsc#1206170).\n","status":"published","published":"2023-01-20T09:26:33Z","modified":"2026-02-04T03:57:33.860349Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0117-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-22809: Fixed an arbitrary file write issue that could be\n  exploited by users with sudoedit permissions (bsc#1207082).\n\nOther fixes:\n\n- Fixed a potential crash while using the sssd plugin (bsc#1206170).\n","status":"published","published":"2023-01-20T09:26:53Z","modified":"2026-02-04T03:57:42.674589Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5811-1","title":"sudo vulnerabilities","description":"Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly\nhandled user-specified editors when using the sudoedit command. A local\nattacker that has permission to use the sudoedit command could possibly use\nthis issue to edit arbitrary files. (CVE-2023-22809)\n\nIt was discovered that the Protobuf-c library, used by Sudo, incorrectly\nhandled certain arithmetic shifts. An attacker could possibly use this\nissue to cause Sudo to crash, resulting in a denial of service. This issue\nonly affected Ubuntu 22.04 LTS. (CVE-2022-33070)\n","status":"published","published":"2023-01-18T17:44:58Z","modified":"2026-04-27T16:32:21.600085377Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5811-2","title":"sudo vulnerability","description":"USN-5811-1 fixed a vulnerability in Sudo. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly\n handled user-specified editors when using the sudoedit command. A local\n attacker that has permission to use the sudoedit command could possibly use\n this issue to edit arbitrary files. (CVE-2023-22809)\n","status":"published","published":"2023-01-18T19:23:38Z","modified":"2026-06-25T13:31:41.559123964Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5811-3","title":"sudo vulnerability","description":"USN-5811-1 fixed a vulnerability in Sudo. This update provides\nthe corresponding update for Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly\n handled user-specified editors when using the sudoedit command. A local\n attacker that has permission to use the sudoedit command could possibly use\n this issue to edit arbitrary files. (CVE-2023-22809)\n","status":"published","published":"2023-01-30T13:51:21Z","modified":"2026-06-29T13:50:45.203282986Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}