In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-sudo | Feb 11, 2020 | Jan 29, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-sudoamazon-linux-ami-2-upgrade-sudo-debuginfoamazon-linux-ami-2-upgrade-sudo-devel | Apr 27, 2020 | Jan 29, 2020 | |
| Amazon_linux | — | amazon-linux-upgrade-sudo | Mar 19, 2020 | Jan 29, 2020 |
| Apple Osx Sudo | apple-osx-security-update-2020-001-high-sierraapple-osx-security-update-2020-001-mojaveapple-osx-upgrade-latest | Jan 29, 2020 | Jan 29, 2020 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 29, 2020 |
| Centos_linux | — | centos-upgrade-sudocentos-upgrade-sudo-debuginfocentos-upgrade-sudo-debugsourcecentos-upgrade-sudo-devel | Feb 14, 2020 | Jan 29, 2020 |
| Debian | debian-upgrade-sudo | Feb 3, 2020 | Jan 29, 2020 | |
| Freebsd | freebsd-upgrade-package-sudo | Feb 1, 2020 | Jan 30, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-app-admin-sudo | Mar 16, 2020 | Jan 29, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-sudo | Jun 17, 2020 | Jan 29, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-sudo | Apr 16, 2020 | Jan 29, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-sudo | Feb 24, 2020 | Jan 29, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sudo | Feb 26, 2020 | Jan 29, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-sudo | Oct 26, 2020 | Jan 29, 2020 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-security-sudo-1-8-31-1-11-4-24-0-1-75-1 | Jan 19, 2021 | Jan 29, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-sudooracle-linux-upgrade-sudo-devel | Feb 19, 2020 | Jan 30, 2020 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Dec 29, 2020 | Jan 29, 2020 | |
| Redhat_linux | redhat-upgrade-sudoredhat-upgrade-sudo-debuginforedhat-upgrade-sudo-debugsourceredhat-upgrade-sudo-devel | Feb 14, 2020 | Jan 29, 2020 | |
| Suse | — | suse-upgrade-sudosuse-upgrade-sudo-develsuse-upgrade-sudo-plugin-pythonsuse-upgrade-sudo-test | Feb 19, 2020 | Jan 29, 2020 |
| Ubuntu | ubuntu-pro-upgrade-sudoubuntu-pro-upgrade-sudo-ldapubuntu-upgrade-sudoubuntu-upgrade-sudo-ldap | Feb 4, 2020 | Jan 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub