Sudo Project vulnerabilities

Products

• Sudo 24

Newest

• sudo project sudo, red hat ai inference server 3.3, enterprise linux 10 +25 more +27 more In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during... CVE-2026-35535 Fix available 7.4 HighApril 3, 2026
• sudo, canonical ubuntu linux, debian linux +5 more +7 more Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a... CVE-2025-32463 In KEVPublic exploitFix available EPSS 55.5% 9.3 CriticalJune 30, 2025
• sudo project sudo, siemens sidis secured smartplug +1 more Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the... CVE-2025-32462 Public exploitFix available 2.8 LowJune 30, 2025
• sudo project sudo, fedora, red hat enterprise linux 6 +3 more +5 more Sudo: improper handling of ipa_hostname leads to privilege mismanagement CVE-2023-7090 Fix available 6.6 MediumDecember 23, 2023
• sudo project sudo Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege... CVE-2023-42465 Fix available 7.0 HighDecember 22, 2023
• sudo project sudo, netapp active iq unified manager +1 more Sudo before 1.9.13 does not escape control characters in sudoreplay output. CVE-2023-28487 Fix available 5.3 MediumMarch 16, 2023
• sudo project sudo, netapp active iq unified manager +1 more Sudo before 1.9.13 does not escape control characters in log messages. CVE-2023-28486 Fix available 5.3 MediumMarch 16, 2023
• sudo project sudo, fedoraproject fedora +1 more Sudo before 1.9.13p2 has a double free in the per-command chroot feature. CVE-2023-27320 Fix available 7.2 HighFebruary 28, 2023
• sudo project sudo, apple macos, debian linux +1 more +3 more In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the... CVE-2023-22809 Public exploitFix available EPSS 55.4% 7.8 HighJanuary 18, 2023
• sudo project sudo Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth... CVE-2022-43995 Fix available 7.1 HighNovember 2, 2022
• sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 more Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ... CVE-2021-3156 In KEVPublic exploitFix available EPSS 100.0% 7.8 HighJanuary 26, 2021
• sudo project sudo, fedoraproject fedora, netapp hci management node +1 more +3 more selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to... CVE-2021-23240 Fix available 7.8 HighJanuary 12, 2021
• sudo project sudo, debian linux, fedoraproject fedora +3 more +5 more The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform... CVE-2021-23239 Fix available 2.5 LowJanuary 12, 2021
• debian linux, sudo project sudo +1 more In Sudo through 1.8.29, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based... CVE-2019-18634 Public exploitFix available EPSS 19.3% 7.8 HighJanuary 29, 2020
• debian shadow, red hat sudo, debian linux +1 more +3 more There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su -... CVE-2005-4890 Fix available 7.8 HighNovember 4, 2019
• sudo project sudo Sudo through 1.8.29 allows local users to escalate to root if they have write access to file... CVE-2019-18684 Disputed 7.0 HighNovember 4, 2019
• sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 more In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain... CVE-2019-14287 Public exploitFix available EPSS 63.8% 8.8 HighOctober 14, 2019
• sudo project sudo Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded... CVE-2017-1000368 Fix available 8.2 HighJune 5, 2017
• sudo project sudo Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded... CVE-2017-1000367 Public exploitFix available 6.4 MediumMay 30, 2017
• [unknown] sudo sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if... CVE-2016-7076 Fix available 6.4 MediumNovember 14, 2016
• sudo project sudo The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write... CVE-2015-8239 Public exploitFix available 7.0 HighJuly 26, 2016
• sudo project sudo sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a... CVE-2015-5602 Public exploitFix available 7.2 HighNovember 10, 2015
• sudo project sudo sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo... CVE-2014-9680 Fix available 3.3 LowMarch 20, 2014
• sudo project sudo, debian linux +1 more Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow... CVE-2002-0184 Public exploit 7.8 HighMay 16, 2002