Skip to content

sudo vulnerabilities (Red Hat)

37 vulnerabilities.

sudo Red Hat Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization CVE-2026-96512 Public exploitFix available 7.8 HighSeptember 23, 2026
sudo Red Hat Sudo through 1.9.17p2 Intercept Policy Bypass via execveat CVE-2026-82474 Public exploitFix available 8.5 HighAugust 29, 2026
sudo Red Hat In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during... CVE-2026-35535 Fix available 7.4 HighApril 3, 2026
sudo Red Hat Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 56.3% 9.3 CriticalJune 30, 2025
sudo Red Hat Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the... CVE-2025-32462 Public exploitFix available 2.8 LowJune 30, 2025
sudo Red Hat Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege... CVE-2023-42465 Fix available 7.0 HighDecember 22, 2023
sudo Red Hat Sudo before 1.9.13 does not escape control characters in sudoreplay output. CVE-2023-28487 Fix available 5.3 MediumMarch 16, 2023
sudo Red Hat Sudo before 1.9.13 does not escape control characters in log messages. CVE-2023-28486 Fix available 5.3 MediumMarch 16, 2023
sudo Red Hat In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the... CVE-2023-22809 Public exploitFix available EPSS 55.4% 7.8 HighJanuary 18, 2023
sudo Red Hat Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ... CVE-2021-3156 In KEVPublic exploitFix available EPSS 100.0% 7.8 HighJanuary 26, 2021
sudo Red Hat selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to... CVE-2021-23240 Fix available 7.8 HighJanuary 12, 2021
sudo Red Hat The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform... CVE-2021-23239 Fix available 2.5 LowJanuary 12, 2021
sudo Red Hat In Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based... CVE-2019-18634 Public exploitFix available EPSS 19.3% 7.8 HighJanuary 29, 2020
sudo Red Hat In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a... CVE-2019-19232 Fix availableDisputed 7.5 HighDecember 19, 2019
sudo Red Hat In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in... CVE-2019-19234 Fix availableDisputed 7.5 HighDecember 19, 2019
sudo Red Hat In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain... CVE-2019-14287 Public exploitFix available EPSS 63.8% 8.8 HighOctober 14, 2019
sudo Red Hat Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded... CVE-2017-1000368 Fix available 8.2 HighJune 5, 2017
sudo Red Hat Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded... CVE-2017-1000367 Public exploitFix available 6.4 MediumMay 30, 2017
sudo Red Hat sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and... CVE-2016-7091 Fix available 4.4 MediumDecember 22, 2016
sudo Red Hat sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if... CVE-2016-7076 Fix available 6.4 MediumNovember 14, 2016
sudo Red Hat sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec... CVE-2016-7032 Fix available 7.0 HighNovember 14, 2016
sudo Red Hat sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo... CVE-2014-9680 Fix available 3.3 LowMarch 20, 2014
sudo Red Hat Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment... CVE-2014-0106 Fix available 6.6 MediumMarch 11, 2014
sudo Red Hat sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not... CVE-2013-2777 Fix available 4.4 MediumMarch 9, 2013
sudo Red Hat sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or... CVE-2013-2776 Fix available 4.4 MediumMarch 9, 2013
sudo Red Hat sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does... CVE-2013-1776 Fix available 4.4 MediumMarch 9, 2013
sudo Red Hat sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically... CVE-2013-1775 Public exploitFix available 6.9 MediumMarch 4, 2013
sudo Red Hat A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users... CVE-2012-3440 Fix available 5.6 MediumAugust 8, 2012
sudo Red Hat sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support... CVE-2012-2337 Fix available 7.2 HighMay 18, 2012
sudo Red Hat check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a... CVE-2011-0010 Fix available 4.4 MediumJanuary 18, 2011
sudo Red Hat Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the... CVE-2010-2956 Fix available 6.2 MediumSeptember 10, 2010
sudo Red Hat The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does... CVE-2010-1646 Fix available 6.2 MediumJune 7, 2010
sudo Red Hat The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a... CVE-2010-1163 Fix available 6.9 MediumApril 16, 2010
sudo Red Hat sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group... CVE-2010-0427 Fix available 4.4 MediumFebruary 25, 2010
sudo Red Hat sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a... CVE-2010-0426 Public exploitFix available 6.9 MediumFebruary 24, 2010
sudo Red Hat parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group)... CVE-2009-0034 Fix available 7.8 HighJanuary 30, 2009
sudo Red Hat Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user... CVE-2005-1993 Fix available 3.7 LowJune 20, 2005