{"id":"CVE-2023-27320","aliases":["ALPINE-CVE-2023-27320","AZL-13784","BELL-CVE-2023-27320","DEBIAN-CVE-2023-27320","EUVD-2023-31097","GHSA-w8wp-rv4w-h5pp","OESA-2023-1160","OESA-2023-1172","SUSE-SU-2023:1665-1","UBUNTU-CVE-2023-27320","USN-5908-1","openSUSE-SU-2024:12795-1"],"status":"published","title":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01664,"percentile":0.76885,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2023-02-28T00:00:00Z","modified":"2026-11-03T06:32:48Z","fixes":[{"ecosystem":"Alpine:v3.17","package":"sudo","fixed_in":["1.9.12_p2-r1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"sudo","fixed_in":["1.9.13p3-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.9.13p3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.9.13p3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.9.13p3-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"sudo","fixed_in":["1.9.8p2-10.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"sudo","fixed_in":["1.9.8p2-10.oe2203"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"sudo","fixed_in":["1.9.9-1ubuntu2.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"sudo","fixed_in":["1.9.13p3-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.17","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.8"},{"fixed":"1.9.12_p2-r1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-10.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-10.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1ubuntu2.3"}]}],"versions":["1.9.5p2-3ubuntu2","1.9.9-1ubuntu2","1.9.9-1ubuntu2.1","1.9.9-1ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1ubuntu2.3"}]}],"versions":["1.9.5p2-3ubuntu2","1.9.9-1ubuntu2","1.9.9-1ubuntu2.1","1.9.9-1ubuntu2.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-2.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"sudo_project","product":"sudo"}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2023/02/28/1","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory","web","report"]},{"url":"https://www.sudo.ws/releases/stable/#1.9.13p2","tags":["x_transferred","Release Notes","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/03/01/8","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLXMRAMXC3BYL4DNKVTK3V6JDMUXZ7B/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6VW24YGXJYI4NZ5HZPQCF4MCE7766AU/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/332KN4QI6QXB7NI7SWSJ2EQJKWIILFN6/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230413-0009/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202309-12","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27320","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/332KN4QI6QXB7NI7SWSJ2EQJKWIILFN6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLXMRAMXC3BYL4DNKVTK3V6JDMUXZ7B"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6VW24YGXJYI4NZ5HZPQCF4MCE7766AU"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/332KN4QI6QXB7NI7SWSJ2EQJKWIILFN6"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FPLXMRAMXC3BYL4DNKVTK3V6JDMUXZ7B"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6VW24YGXJYI4NZ5HZPQCF4MCE7766AU"},{"url":"https://security.netapp.com/advisory/ntap-20230413-0009"},{"url":"https://github.com/advisories/GHSA-w8wp-rv4w-h5pp","tags":["report"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-27320","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-27320","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/27xxx/CVE-2023-27320.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-27320","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1160","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1172","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231665-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203201","tags":["report"]},{"url":"https://bugzilla.suse.com/1206483","tags":["report"]},{"url":"https://bugzilla.suse.com/1206772","tags":["report"]},{"url":"https://bugzilla.suse.com/1208595","tags":["report"]},{"url":"https://bugzilla.suse.com/1209361","tags":["report"]},{"url":"https://bugzilla.suse.com/1209362","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-27320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-28487","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-27320","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5908-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27320","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-27320","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T00:00:00Z","modified":"2025-03-21T20:49:54.702Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:35:26.63732Z"}],"euvd":[{"id":"EUVD-2023-31097","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T00:00:00Z","modified":"2025-03-21T20:49:54Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:55.622908Z"}],"ghsa":[{"id":"GHSA-w8wp-rv4w-h5pp","title":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T18:30:16Z","modified":"2025-03-21T21:32:41Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T15:00:24.265228Z"}],"nvd":[{"id":"CVE-2023-27320","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T18:15:10.547Z","modified":"2026-06-17T05:44:46.973Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:07:47.623983Z"}],"osv":[{"id":"ALPINE-CVE-2023-27320","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T18:15:10.547Z","modified":"2026-11-03T06:32:48.22845393Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"AZL-13784","title":"CVE-2023-27320 affecting package sudo for versions less than 1.9.13p3-1","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T18:15:10Z","modified":"2026-04-21T04:23:01.569402Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-27320","title":"CVE-2023-27320 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:21:31.729026Z","modified":"2026-01-26T09:48:54.868975Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-27320","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T00:00:00Z","modified":"2026-10-28T02:30:32.596669387Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:31.135751Z"},{"id":"DEBIAN-CVE-2023-27320","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T18:15:10.547Z","modified":"2026-10-26T18:00:34.530991068Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"OESA-2023-1160","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\r\n\r\nSudo before 1.9.13p2 has a double free in the per-command chroot feature.(CVE-2023-27320)","status":"published","published":"2023-03-17T11:05:38Z","modified":"2026-08-18T01:17:37.2665081Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1172","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\r\n\r\nSudo before 1.9.13p2 has a double free in the per-command chroot feature.(CVE-2023-27320)","status":"published","published":"2023-03-17T11:05:39Z","modified":"2026-08-18T01:17:37.542281566Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2023-27320","description":"Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","status":"published","published":"2023-02-28T18:15:00Z","modified":"2026-02-04T03:14:36.579914Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.198616Z"},{"id":"openSUSE-SU-2024:12795-1","title":"sudo-1.9.13p3-2.1 on GA media","description":"These are all security issues fixed in the sudo-1.9.13p3-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:16:55.654695Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:1665-1","title":"Security update for sudo","description":"This update for sudo fixes the following issue:\n\nSecurity issues:\n\n- CVE-2023-28486: Fixed sudo does not escape control characters in log messages. (bsc#1209362)\n- CVE-2023-28487: Fixed sudo does not escape control characters in sudoreplay output. (bsc#1209361)\n- CVE-2023-27320: Fixed a potential security issue with a double free with per-command chroot sudoers rules (bsc#1208595).\n\nBug fixes:\n\n- Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483)\n- If NOPASSWD is specified, don't ask for password if command is not found (bsc#1206772).\n- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).\n","status":"published","published":"2023-03-29T10:55:22Z","modified":"2026-02-04T02:21:37.486364Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-5908-1","title":"sudo vulnerability","description":"It was discovered that Sudo incorrectly handled the per-command chroot\nfeature. In certain environments where Sudo is configured with a rule that\ncontains a CHROOT setting, a local attacker could use this issue to cause\nSudo to crash, resulting in a denial of service, or possibly escalate\nprivileges.\n","status":"published","published":"2023-03-02T14:00:27Z","modified":"2026-02-10T04:42:58Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}