Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-sudo | May 4, 2022 | Jan 26, 2021 | |
| Alpine Linux | alpine-linux-upgrade-sudo | Aug 22, 2024 | Jan 26, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-sudoamazon-linux-ami-2-upgrade-sudo-debuginfoamazon-linux-ami-2-upgrade-sudo-devel | Oct 18, 2022 | Jan 26, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-sudo | Oct 18, 2022 | Jan 26, 2021 |
| Apple Osx Sudo | apple-osx-upgrade-latest | Feb 19, 2021 | Jan 26, 2021 | |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 26, 2021 |
| Centos_linux | — | centos-upgrade-sudocentos-upgrade-sudo-debuginfocentos-upgrade-sudo-debugsourcecentos-upgrade-sudo-devel | Jan 28, 2021 | Jan 26, 2021 |
| Debian | debian-upgrade-sudo | Jan 28, 2021 | Jan 26, 2021 | |
| Freebsd | freebsd-upgrade-package-sudo | Jan 27, 2021 | Jan 26, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-app-admin-sudo | Jan 27, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-sudo | Feb 22, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-sudo | Feb 22, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-sudo | Mar 24, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-sudo | Feb 2, 2021 | Jan 26, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-sudo | Feb 8, 2021 | Jan 26, 2021 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Aug 24, 2022 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-security-sudo-1-8-28-0-175-3-36-0-25-0oracle-solaris-11-4-upgrade-security-sudo-1-8-31-1-11-4-30-0-1-88-3 | Feb 17, 2021 | Jan 26, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-sudooracle-linux-upgrade-sudo-devel | Jan 27, 2021 | Jan 26, 2021 |
| Redhat Openshift | linuxrpm-upgrade-redhat-coreos | Mar 12, 2021 | Jan 26, 2021 | |
| Redhat_linux | redhat-upgrade-sudoredhat-upgrade-sudo-debuginforedhat-upgrade-sudo-debugsourceredhat-upgrade-sudo-devel | Jan 28, 2021 | Jan 26, 2021 | |
| Suse | — | suse-upgrade-sudosuse-upgrade-sudo-develsuse-upgrade-sudo-plugin-pythonsuse-upgrade-sudo-test | Jan 28, 2021 | Jan 26, 2021 |
| Ubuntu | ubuntu-pro-upgrade-sudoubuntu-upgrade-sudoubuntu-upgrade-sudo-ldap | Jan 27, 2021 | Jan 26, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub