SU
Product
sudo
On CISA KEVExploited in the wild
25
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 19Medium 3Low 2
Watch
Add sudo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-9680 | 3.3 | Apr 24 | sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not… Affected: through 1.8.11 |
| CVE-2021-23239 | 2.5 | Jan 12 | The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in… Affected: before 1.8.32; 1.9.0 before 1.9.5 |
Showing 2