Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sudo-python-pluginUpgrade sudo | Feb 15, 2024 | Dec 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade sudoUpgrade sudo-develUpgrade sudo-debuginfo | Feb 8, 2024 | Dec 22, 2023 |
| Amazon_linux | — | Upgrade sudo | Feb 6, 2024 | Dec 22, 2023 |
| Amazon_linux_2023 | — | Upgrade sudo-logsrvdUpgrade sudo-python-pluginUpgrade sudoUpgrade sudo-logsrvd-debuginfoUpgrade sudo-debugsourceUpgrade sudo-develUpgrade sudo-debuginfoUpgrade sudo-python-plugin-debuginfo | Feb 17, 2025 | Sep 5, 2023 |
| Debian | — | Upgrade sudo | May 15, 2025 | Dec 22, 2023 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Jan 25, 2024 | Dec 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sudo | Mar 13, 2024 | Dec 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sudo | Mar 13, 2024 | Dec 22, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade sudo | May 31, 2024 | Dec 22, 2023 |
| Oracle_linux | — | Upgrade sudoUpgrade sudo-python-plugin | Feb 14, 2024 | Sep 5, 2023 |
| Redhat_linux | — | Upgrade sudo-debugsourceUpgrade sudo-debuginfoUpgrade sudoNo solution existsUpgrade sudo-python-pluginUpgrade sudo-python-plugin-debuginfo | Feb 15, 2024 | Dec 22, 2023 |
| Suse | — | Upgrade sudo-plugin-pythonUpgrade sudo-testUpgrade sudoUpgrade sudo-devel | Mar 8, 2024 | Dec 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub