High severity · published Oct 10, 2017
CVE-2015-8239
The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed
7.0
CVSS
0.5%
EPSS
No
On KEV
Description
The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.
CVSS vector
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Sudo · Sudo Project
1.8.8; 1.8.8; 1.8.8; 1.8.8; 1.8.8; 1.8.9; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-8239
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-8239
Mailing List
http://www.openwall.com/lists/oss-security/2015/11/18/22
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1283635
Issue Tracking
https://www.sudo.ws/repos/sudo/rev/0cd3cc8fa195
Issue Tracking
https://www.sudo.ws/repos/sudo/rev/24a3d9215c64
Issue Tracking
https://www.sudo.ws/repos/sudo/rev/397722cdd7ec
More from Sudo
7.8
CVE-2025-32463
Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
7.8
CVE-2021-3156
Sudo Heap-Based Buffer Overflow Vulnerability
8.8
CVE-2025-32462
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines
8.8
CVE-2023-7090
A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo
8.8
CVE-2019-14287
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by…