SU
Vendor
sudo-project
25
CVEs
2
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-82474 | SU sudo sudo-project | 7.8 | Aug 29 | Sudo through 1.9.17p2 Intercept Policy Bypass via execveat |
| CVE-2026-35535 | SU Sudo Sudo project | 7.8 | Apr 3 | In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to… |
| CVE-2025-32462 | SU Sudo Sudo Project | 8.8 | Jun 30 | Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines |
| CVE-2025-32463 In wildKEV | SU Sudo Sudo project | 7.8 | Jun 30 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability |
| CVE-2023-7090 | SU Sudo Sudo Project | 8.8 | Dec 23 | A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo |
| CVE-2023-42465 | SU Sudo Sudo Project | 7.0 | Dec 22 | Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value… |
| CVE-2023-28487 | SU Sudo Sudo Project | 5.3 | Mar 16 | Sudo before 1.9.13 does not escape control characters in sudoreplay output |
| CVE-2023-28486 | SU Sudo Sudo Project | 5.3 | Mar 16 | Sudo before 1.9.13 does not escape control characters in log messages |
| CVE-2023-27320 | SU Sudo Sudo Project | 7.2 | Feb 28 | Sudo before 1.9.13p2 has a double free in the per-command chroot feature |
| CVE-2023-22809 | SU Sudo Sudo Project | 7.8 | Jan 18 | In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a… |
| CVE-2022-43995 | SU Sudo Sudo Project | 7.1 | Nov 2 | Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read |
| CVE-2021-3156 In wildKEV | SU Sudo Sudo Project | 7.8 | Jan 26 | Sudo Heap-Based Buffer Overflow Vulnerability |
| CVE-2021-23240 | SU Sudo Sudo Project | 7.8 | Jan 12 | selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a… |
| CVE-2021-23239 | SU Sudo Sudo Project | 2.5 | Jan 12 | The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in… |
| CVE-2019-18634 | SU Sudo Sudo Project | 7.8 | Jan 29 | In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process |
| CVE-2005-4890 | SU Sudo Sudo Project | 7.8 | Nov 4 | There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program" |
| CVE-2019-18684 | SU Sudo Sudo Project | 7.0 | Nov 4 | Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo process |
| CVE-2019-14287 | SU Sudo Sudo Project | 8.8 | Oct 17 | In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by… |
| CVE-2016-7076 | SU Sudo Sudo Project | 7.8 | May 29 | sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied… |
| CVE-2015-8239 | SU Sudo Sudo Project | 7.0 | Oct 10 | The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed |
| CVE-2017-1000368 | SU Sudo Sudo Project | 8.2 | Jun 5 | Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure… |
| CVE-2017-1000367 | SU Sudo Sudo Project | 6.4 | Jun 5 | Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and… |
| CVE-2014-9680 | SU Sudo Sudo Project | 3.3 | Apr 24 | sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not… |
| CVE-2015-5602 | SU Sudo Sudo Project | – | Nov 17 | sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as… |
| CVE-2002-0184 | SU Sudo Sudo Project | 7.8 | May 16 | Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p… |