Sudo project kayıtları

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root

• Yerel yetki yükseltme

sudo project · sudo26 Oca 2021

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the -

sudo project · sudo30 Haz 2025

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, a

sudo project · sudo17 Eki 2019

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_ED

• Yerel yetki yükseltme

sudo project · sudo18 Oca 2023

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo proc

• Yerel yetki yükseltme
• Bellek hatası

sudo project · sudo29 Oca 2020

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to e

• Erişim denetimi (IDOR)

sudo project · sudo30 Haz 2025

Sudo: improper handling of ipa_hostname leads to privilege mismanagement

sudo project · sudo23 Ara 2023

Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() functi

• RCE

sudo project · sudo5 Haz 2017

Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privi

• Yerel yetki yükseltme

sudo project · sudo16 May 2002

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by

• Yerel yetki yükseltme

sudo project · sudo12 Oca 2021

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program".

debian · shadow4 Kas 2019

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C libra

• RCE
• Yerel yetki yükseltme

sudo project · sudo29 May 2018

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer

• Yerel yetki yükseltme

sudo project · sudo2 Nis 2026

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

• Bellek hatası

sudo project · sudo28 Şub 2023

sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multipl

• Yerel yetki yükseltme

sudo project · sudo17 Kas 2015

The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command

• Yarış durumu

sudo project · sudo10 Eki 2017

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is

• Kimlik doğrulama atlatma
• Yerel yetki yükseltme

sudo project · sudo22 Ara 2023

Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo process.

• Yerel yetki yükseltme
• Yarış durumu

sudo project · sudo4 Kas 2019

Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can re

• Bellek hatası

sudo project · sudo2 Kas 2022

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function r

• RCE
• Yarış durumu

sudo project · sudo5 Haz 2017

Sudo before 1.9.13 does not escape control characters in sudoreplay output.

• Kimlik doğrulamasız

sudo project · sudo15 Mar 2023

Sudo before 1.9.13 does not escape control characters in log messages.

• Kimlik doğrulamasız

sudo project · sudo15 Mar 2023

sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arb

• Bilgi sızıntısı

sudo project · sudo24 Nis 2017

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning

• Yerel yetki yükseltme
• Yarış durumu

sudo project · sudo12 Oca 2021