sudo vulnerabilities (Debian)
49 vulnerabilities.
-
sudoDebian Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization 7.8 High -
sudoDebian Sudo through 1.9.17p2 Intercept Policy Bypass via execveat 8.5 High -
sudoDebian In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during... 7.4 High -
sudoDebian Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... 9.3 Critical -
sudoDebian Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the... 2.8 Low -
sudoDebian Sudo: improper handling of ipa_hostname leads to privilege mismanagement 6.6 Medium -
sudoDebian Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege... 7.0 High -
sudoDebian Sudo before 1.9.13 does not escape control characters in sudoreplay output. 5.3 Medium -
sudoDebian Sudo before 1.9.13 does not escape control characters in log messages. 5.3 Medium -
sudoDebian Sudo before 1.9.13p2 has a double free in the per-command chroot feature. 7.2 High -
sudoDebian In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the... 7.8 High -
sudoDebian Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth... 7.1 High -
sudoDebian Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ... 7.8 High -
sudoDebian selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to... 7.8 High -
sudoDebian The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform... 2.5 Low -
sudoDebian In Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based... 7.8 High -
sudoDebian In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a... 7.5 High -
sudoDebian In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in... 7.5 High -
sudoDebian There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su -... 7.8 High -
sudoDebian In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain... 8.8 High -
sudoDebian Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded... 8.2 High -
sudoDebian Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded... 6.4 Medium -
sudoDebian sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if... 6.4 Medium -
sudoDebian sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec... 7.0 High -
sudoDebian The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write... 7.0 High -
sudoDebian sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a... 7.2 High -
sudoDebian sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo... 3.3 Low -
sudoDebian Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment... 6.6 Medium -
sudoDebian sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not... 4.4 Medium -
sudoDebian sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or... 4.4 Medium -
sudoDebian sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does... 4.4 Medium -
sudoDebian sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically... 6.9 Medium -
sudoDebian sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support... 7.2 High -
sudoDebian Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local... 7.2 High -
sudoDebian check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a... 4.4 Medium -
sudoDebian Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the... 6.2 Medium -
sudoDebian The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does... 6.2 Medium -
sudoDebian The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a... 6.9 Medium -
sudoDebian sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group... 4.4 Medium -
sudoDebian sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a... 6.9 Medium -
sudoDebian parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group)... 7.8 High -
sudoDebian sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which... 2.1 Low -
sudoDebian sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows... 7.2 High -
sudoDebian Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2)... 4.6 Medium -
sudoDebian Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain... 4.6 Medium -
sudoDebian Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user... 3.7 Low -
sudoDebian Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack... 2.1 Low -
sudoDebian sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style... 7.2 High -
sudoDebian sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows... 2.1 Low