sudo vulnerabilities (Ubuntu)
25 vulnerabilities.
-
sudoUbuntu Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization 7.8 High -
sudoUbuntu Sudo through 1.9.17p2 Intercept Policy Bypass via execveat 8.5 High -
sudoUbuntu In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during... 7.4 High -
sudoUbuntu sudo vulnerability No score -
sudoUbuntu Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... 9.3 Critical -
sudoUbuntu Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the... 2.8 Low -
sudoUbuntu Sudo before 1.9.13 does not escape control characters in sudoreplay output. 5.3 Medium -
sudoUbuntu Sudo before 1.9.13 does not escape control characters in log messages. 5.3 Medium -
sudoUbuntu Sudo before 1.9.13p2 has a double free in the per-command chroot feature. 7.2 High -
sudoUbuntu In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the... 7.8 High -
sudoUbuntu Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function... 5.5 Medium -
sudoUbuntu Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ... 7.8 High -
sudoUbuntu selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to... 7.8 High -
sudoUbuntu The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform... 2.5 Low -
sudoUbuntu In Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based... 7.8 High -
sudoUbuntu In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a... 7.5 High -
sudoUbuntu In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in... 7.5 High -
sudoUbuntu In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain... 8.8 High -
sudoUbuntu Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded... 8.2 High -
sudoUbuntu Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded... 6.4 Medium -
sudoUbuntu sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if... 6.4 Medium -
sudoUbuntu sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec... 7.0 High -
sudoUbuntu The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write... 7.0 High -
sudoUbuntu sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a... 7.2 High -
sudoUbuntu sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo... 3.3 Low