{"id":"CVE-2023-42465","aliases":["ALSA-2024:0811","AZL-32227","BELL-CVE-2023-42465","CLSA-2024-1708426423","CLSA-2024-1708426650","CLSA-2024-1708427919","CLSA-2024-1708428112","CLSA-2024-1708639566","CLSA-2024-1708639645","CLSA-2024-1709547826","CLSA-2024-1713370315","CLSA-2025-1748365696","CLSA-2025-1761325294","CLSA-2026-1790600964","CLSA-2026-1790601456","CLSA-2026-1790606589","DEBIAN-CVE-2023-42465","EUVD-2023-46905","GHSA-62rj-gv2c-8ghr","OESA-2024-1071","RHSA-2024:0811","ROOT-OS-DEBIAN-11-CVE-2023-42465","ROOT-OS-DEBIAN-12-CVE-2023-42465","SUSE-SU-2024:0794-1","SUSE-SU-2024:0794-2","SUSE-SU-2024:0795-1","SUSE-SU-2024:0795-2","SUSE-SU-2024:0796-1","SUSE-SU-2024:0796-2","SUSE-SU-2024:0797-1","SUSE-SU-2024:0797-2","SUSE-SU-2024:0834-1","SUSE-SU-2024:0876-1","SUSE-SU-2024:0876-2","SUSE-SU-2024:0877-1","SUSE-SU-2024:0889-1","SUSE-SU-2024:0890-1","openSUSE-SU-2024:13490-1"],"status":"published","title":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege...","description":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00575,"percentile":0.47758,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-12-22T00:00:00Z","modified":"2026-10-29T11:31:40Z","fixes":[{"ecosystem":"Azure Linux:2","package":"sudo","fixed_in":["1.9.15p5-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"sudo","fixed_in":["1.9.15_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"sudo","fixed_in":["1.9.15-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"sudo","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"sudo-devel","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"sudo","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"sudo-devel","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"sudo","fixed_in":["1.8.6p3-32.el6.tuxcare.els2","1.8.6p3-32.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"sudo-devel","fixed_in":["1.8.6p3-32.el6.tuxcare.els2","1.8.6p3-32.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"sudo","fixed_in":["1.8.6p3-32.el6.tuxcare.els2","1.8.6p3-32.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"sudo-devel","fixed_in":["1.8.6p3-32.el6.tuxcare.els2","1.8.6p3-32.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo","fixed_in":["1.9.5p2-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo-devel","fixed_in":["1.9.5p2-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo-python-plugin","fixed_in":["1.9.5p2-9.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"sudo","fixed_in":["1.8.23-10.el7_9.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"sudo-devel","fixed_in":["1.8.23-10.el7_9.3.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.9.15p2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.9.15p2-2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"sudo","fixed_in":["1.9.2-15.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"sudo","fixed_in":["1.9.2-15.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"sudo","fixed_in":["1.9.8p2-16.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"sudo","fixed_in":["1.9.8p2-15.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"sudo","fixed_in":["1.9.8p2-16.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"sudo","fixed_in":["1.9.8p2-16.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"sudo","fixed_in":["1.9.5p2-3+deb11u4.aikido.7","1.9.5p2-3+deb11u4.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-sudo","fixed_in":["1.9.5p2-3+deb11u4.aikido.7","1.9.5p2-3+deb11u4.aikido.8"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"sudo","fixed_in":["1.9.13p3-1+deb12u4.aikido.5"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-sudo","fixed_in":["1.9.13p3-1+deb12u4.aikido.5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"sudo","fixed_in":["1.9.5p2-150300.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"sudo","fixed_in":["1.9.5p2-150300.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"sudo","fixed_in":["1.9.5p2-150300.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"sudo","fixed_in":["1.9.5p2-150300.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"sudo","fixed_in":["1.9.5p2-150300.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"sudo","fixed_in":["1.9.5p2-150300.3.33.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"sudo","fixed_in":["1.9.12p1-150500.7.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"sudo","fixed_in":["1.9.12p1-150500.7.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"sudo","fixed_in":["1.9.12p1-150500.7.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"sudo","fixed_in":["1.9.9-150400.4.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"sudo","fixed_in":["1.8.27-150000.4.53.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"sudo","fixed_in":["1.8.27-150000.4.53.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"sudo","fixed_in":["1.8.27-150000.4.53.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"sudo","fixed_in":["1.8.27-4.48.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"sudo","fixed_in":["1.8.27-4.48.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"sudo","fixed_in":["1.8.27-4.48.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.12_p1-r1"},{"fixed":"1.9.15_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.13_p3-r0"},{"fixed":"1.9.15-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-32.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-9.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1+deb10u6+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"sudo-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1+deb10u6+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.9.13p3-1","1.9.13p3-1+deb12u1","1.9.13p3-1+deb12u2","1.9.13p3-1+deb12u3","1.9.13p3-1+deb12u4","1.9.13p3-2","1.9.13p3-3","1.9.14p2-1","1.9.15p2-1","1.9.15p2-2","1.9.15p3-1","1.9.15p4-1","1.9.15p4-2","1.9.15p5-1","1.9.15p5-2","1.9.15p5-3","1.9.15p5-3+hurd.1","1.9.16-1","1.9.16-2","1.9.16p1-1","1.9.16p2-1","1.9.16p2-2","1.9.16p2-3","1.9.17p1-1","1.9.17p2-1","1.9.17p2-1exp1","1.9.17p2-2","1.9.17p2-3","1.9.17p2-4","1.9.17p2-5","1.9.17p2-6","1.9.17p2-7","1.9.17p2-8","1.9.17p2-9","1.9.17p2-9exp1"]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p2-2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-15.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-15.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-16.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-15.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-16.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-16.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_3"}]}],"bundled":3},{"source":"osv","ecosystem":"Root:Debian:11","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-3+deb11u4.aikido.7"},{"fixed":"1.9.5p2-3+deb11u4.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-3+deb11u4.aikido.7"},{"fixed":"1.9.5p2-3+deb11u4.aikido.8"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-1+deb12u4.aikido.5"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-1+deb12u4.aikido.5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.33.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.53.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.53.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-150000.4.53.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.48.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.48.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.48.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p2-1.1"}]}],"bundled":2}],"products":[{"vendor":"sudo_project","product":"sudo"}],"references":[{"url":"https://www.sudo.ws/releases/changelog/","tags":["x_transferred","Release Notes","web"]},{"url":"https://www.openwall.com/lists/oss-security/2023/12/21/9","tags":["x_transferred","Exploit","Mailing List","web"]},{"url":"https://github.com/sudo-project/sudo/commit/7873f8334c8d31031f8cfa83bd97ac6029309e4f","tags":["x_transferred","Patch","fix","article"]},{"url":"https://arxiv.org/abs/2309.02545","tags":["x_transferred","Technical Description","Third Party Advisory","web"]},{"url":"https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_15","tags":["x_transferred","Release Notes","web"]},{"url":"https://security.gentoo.org/glsa/202401-29","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6XMRUJCPII4MPWG43HTYR76DGLEYEFZ/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240208-0002/","tags":["x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R4Q23NHCKCLFIHSNY6KJ27GM7FSCEVXM/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R4Q23NHCKCLFIHSNY6KJ27GM7FSCEVXM/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6XMRUJCPII4MPWG43HTYR76DGLEYEFZ/","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/09/23/2","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/09/24/6","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42465","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R4Q23NHCKCLFIHSNY6KJ27GM7FSCEVXM"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6XMRUJCPII4MPWG43HTYR76DGLEYEFZ"},{"url":"https://security.netapp.com/advisory/ntap-20240208-0002"},{"url":"https://www.sudo.ws/releases/changelog"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R4Q23NHCKCLFIHSNY6KJ27GM7FSCEVXM"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6XMRUJCPII4MPWG43HTYR76DGLEYEFZ"},{"url":"https://github.com/advisories/GHSA-62rj-gv2c-8ghr"},{"url":"https://access.redhat.com/errata/RHSA-2024:0811","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28486","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28487","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42465","tags":["report"]},{"url":"https://bugzilla.redhat.com/2179272","tags":["report"]},{"url":"https://bugzilla.redhat.com/2179273","tags":["report"]},{"url":"https://bugzilla.redhat.com/2255568","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-0811.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-42465","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2024-1708426423.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2024-1708426650.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1708427919.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1708428112.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2024-1708639566.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2024-1708639645.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1709547826.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1713370315.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1748365696.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3156","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761325294.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790600964.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790601456.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790606589.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/42xxx/CVE-2023-42465.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-42465","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1071","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255568","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0811.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28486","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28486","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28487","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42465","tags":["advisory"]},{"url":"https://arxiv.org/pdf/2309.02545.pdf","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240794-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219026","tags":["report"]},{"url":"https://bugzilla.suse.com/1220389","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42465","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240794-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240795-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240795-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240796-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240796-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240797-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240797-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240834-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240876-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1221134","tags":["report"]},{"url":"https://bugzilla.suse.com/1221151","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240876-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240877-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240889-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240890-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42456","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-42465","description":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.","status":"published","published":"2023-12-22T00:00:00Z","modified":"2025-11-04T21:08:25.98Z","updated_at":"2026-11-02T14:35:17.812395Z"}],"euvd":[{"id":"EUVD-2023-46905","description":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.","status":"published","published":"2023-12-22T00:00:00Z","modified":"2025-11-04T21:08:25Z","updated_at":"2026-11-02T19:49:21.645169Z"}],"ghsa":[{"id":"GHSA-62rj-gv2c-8ghr","title":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege...","description":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.","status":"published","published":"2023-12-22T18:30:30Z","modified":"2025-11-05T00:31:16Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:38.82847Z"}],"nvd":[{"id":"CVE-2023-42465","description":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.","status":"published","published":"2023-12-22T16:15:08.057Z","modified":"2026-06-17T06:23:53.593Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:08:57.117371Z"}],"osv":[{"id":"AZL-32227","title":"CVE-2023-42465 affecting package sudo for versions less than 1.9.15p5-1","description":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.","status":"published","published":"2023-12-22T16:15:08Z","modified":"2026-04-21T04:26:44.312943Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"BELL-CVE-2023-42465","status":"published","published":"2023-12-22T06:00:06.806704Z","modified":"2026-01-26T09:35:29.203961Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"DEBIAN-CVE-2023-42465","description":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.","status":"published","published":"2023-12-22T16:15:08.057Z","modified":"2026-10-26T18:02:32.830100006Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2024-1071","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\r\n\r\nSudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.(CVE-2023-42465)","status":"published","published":"2024-01-12T11:06:31Z","modified":"2026-08-18T01:18:13.393569864Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:0811","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-16T12:46:41Z","modified":"2026-06-26T12:22:21.988977626Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.270484Z"},{"id":"ALSA-2024:0811","title":"Moderate: sudo security update","description":"The sudo packages contain the sudo utility which allows system\nadministrators to provide certain users with the permission to execute\nprivileged commands, which are used for system management purposes, without\nhaving to log in as root.\n\nBug Fix(es) and Enhancement(s):\n\n* CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output\n* CVE-2023-28486 sudo: Sudo does not escape control characters in log messages\n* CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables","status":"published","published":"2024-02-14T00:00:00Z","modified":"2026-10-29T11:31:40.399612828Z","updated_at":"2026-11-02T15:27:52.091404Z"},{"id":"CLSA-2024-1708426423","title":"sudo: Fix of CVE-2023-42465","description":"- CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks","status":"published","published":"2024-02-20T10:53:46Z","modified":"2026-06-01T00:33:12.084281659Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708426650","title":"sudo: Fix of CVE-2023-42465","description":"- CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks","status":"published","published":"2024-02-20T10:57:33Z","modified":"2026-06-01T00:33:22.260802821Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708427919","title":"sudo: Fix of CVE-2023-42465","description":"- CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks","status":"published","published":"2024-02-20T11:18:42Z","modified":"2026-06-01T00:33:03.231621801Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708428112","title":"sudo: Fix of CVE-2023-42465","description":"- CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks","status":"published","published":"2024-02-20T11:21:55Z","modified":"2026-06-01T00:33:25.16382142Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708639566","title":"sudo: Fix of CVE-2023-42465","description":"- Remove sudo-1.9.15-CVE-2023-42465.patch due to bug","status":"published","published":"2024-02-22T22:06:09Z","modified":"2026-06-01T00:33:25.187801272Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1708639645","title":"sudo: Fix of CVE-2023-42465","description":"- Remove sudo-1.9.15-CVE-2023-42465.patch due to bug","status":"published","published":"2024-02-22T22:07:28Z","modified":"2026-06-01T00:33:03.338562327Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1709547826","title":"sudo: Fix of CVE-2023-42465","description":"- CVE-2023-42465: Prevent row hammer attacks by modifying application logic to\n  equal a success value instead of not equaling an error value and enhancing bit\n  flip resistance of values.","status":"published","published":"2024-03-04T10:23:49Z","modified":"2026-06-01T00:30:17.142762705Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2024-1713370315","title":"sudo: Fix of CVE-2023-42465","description":"- CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks","status":"published","published":"2024-04-17T16:13:07Z","modified":"2026-06-01T00:33:04.559332503Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CLSA-2025-1748365696","title":"sudo: Fix of CVE-2021-3156","description":"- CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks","status":"published","published":"2026-06-24T16:17:32Z","modified":"2026-10-26T09:43:37.464264139Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1761325294","title":"Fix CVE(s): CVE-2021-23240, CVE-2023-42465, CVE-2025-32462","description":"   * SECURITY UPDATE: privilege escalation via symlinks\n   - debian/patches/CVE-2021-23240.patch: fix opportunity for local\n     unprivileged user to gain file ownership via symlinks.\n   * SECURITY UPDATE: unauthorized commands execution on unintended hosts\n   - debian/patches/CVE-2025-32462.patch: restrict user from setting remote\n     host for command unless listing privileges\n   - CVE-2025-32462\n   * SECURITY UPDATE: row hammer attack\n   - debian/patches/CVE-2023-42465.patch: make return values resist to\n     single bit flips\n   - CVE-2023-42465","status":"published","published":"2025-10-24T17:01:38Z","modified":"2026-06-04T10:04:29.804548Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1790600964","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-28T13:09:33Z","modified":"2026-10-26T09:43:39.785803477Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790601456","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-28T13:17:45Z","modified":"2026-10-26T09:43:13.516156002Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790606589","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-30T16:36:16Z","modified":"2026-10-26T09:43:53.696880037Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CVE-2023-42465","description":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.","status":"published","published":"2023-12-22T00:00:00Z","modified":"2026-10-28T10:35:12.196095456Z","updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"openSUSE-SU-2024:13490-1","title":"sudo-1.9.15p2-1.1 on GA media","description":"These are all security issues fixed in the sudo-1.9.15p2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:52:30.561189Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2023-42465","title":"CVE-2023-42465 in sudo - Patched by Root","description":"Root has patched CVE-2023-42465 in the sudo package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-09-14T12:03:15Z","modified":"2026-09-14T13:15:04.215875287Z","updated_at":"2026-11-02T15:53:28.80888Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-42465","title":"CVE-2023-42465 in sudo - Patched by Root","description":"Root has patched CVE-2023-42465 in the sudo package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-10-08T10:21:11Z","modified":"2026-10-08T11:15:04.236474402Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"SUSE-SU-2024:0794-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n","status":"published","published":"2024-03-07T09:33:17Z","modified":"2026-02-04T03:41:54.15583Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0794-2","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n","status":"published","published":"2024-03-07T09:33:17Z","modified":"2026-02-04T04:25:57.897246Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0795-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n","status":"published","published":"2024-03-07T09:33:50Z","modified":"2026-02-04T02:46:21.704411Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0795-2","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n","status":"published","published":"2024-03-07T09:33:50Z","modified":"2026-02-04T03:47:19.360537Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0796-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n","status":"published","published":"2024-03-07T09:34:23Z","modified":"2026-02-04T04:20:49.756101Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0796-2","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n","status":"published","published":"2024-03-07T09:34:23Z","modified":"2026-02-04T03:17:49.682324Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0797-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n","status":"published","published":"2024-03-07T09:34:35Z","modified":"2026-02-04T03:29:32.60731Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0797-2","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n","status":"published","published":"2024-03-07T09:34:35Z","modified":"2026-02-04T04:31:57.252575Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0834-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).\n\nFixed issues introduced by first patches for CVE-2023-42465 (bsc#1220389). \n","status":"published","published":"2024-03-11T13:22:21Z","modified":"2026-02-04T03:35:39.743113Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0876-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).\n","status":"published","published":"2024-03-13T14:45:35Z","modified":"2026-02-04T03:11:05.282444Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0876-2","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).\n","status":"published","published":"2024-03-13T14:45:44Z","modified":"2025-05-02T04:35:26.64567Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0877-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).\n","status":"published","published":"2024-03-13T15:56:19Z","modified":"2026-02-04T02:40:47.201544Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0889-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).\n","status":"published","published":"2024-03-14T12:31:08Z","modified":"2026-02-04T03:33:26.174573Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0890-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).\n","status":"published","published":"2024-03-14T12:31:28Z","modified":"2026-02-04T02:59:20.390413Z","updated_at":"2026-11-02T15:53:54.239786Z"}]}}