Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sudo | May 4, 2022 | Jan 26, 2021 |
| Alpine Linux | — | Upgrade sudo | Aug 22, 2024 | Jan 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade sudoUpgrade sudo-debuginfoUpgrade sudo-devel | Oct 18, 2022 | Jan 26, 2021 |
| Amazon_linux | — | Upgrade sudo | Oct 18, 2022 | Jan 26, 2021 |
| Apple Osx Sudo | — | Upgrade macOS to the latest version | Feb 19, 2021 | Jan 26, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 26, 2021 |
| Centos_linux | — | Upgrade sudo-debuginfoUpgrade sudo-develUpgrade sudoUpgrade sudo-debugsource | Jan 28, 2021 | Jan 26, 2021 |
| Debian | — | Upgrade sudo | Jan 28, 2021 | Jan 26, 2021 |
| Freebsd | — | Upgrade sudo | Jan 27, 2021 | Jan 26, 2021 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Jan 27, 2021 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sudo | Feb 22, 2021 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sudo | Feb 22, 2021 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sudo | Mar 24, 2021 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sudo | Feb 2, 2021 | Jan 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sudo | Feb 8, 2021 | Jan 26, 2021 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 24, 2022 |
| Oracle Solaris | — | Upgrade security/sudo to version 1.8.28-0.175.3.36.0.25.0 on Solaris 11.3Upgrade security/sudo to version 1.8.31.1-11.4.30.0.1.88.3 on Solaris 11.4 | Feb 17, 2021 | Jan 26, 2021 |
| Oracle_linux | — | Upgrade sudoUpgrade sudo-devel | Jan 27, 2021 | Jan 26, 2021 |
| Redhat Openshift | — | Upgrade redhat-coreos | Mar 12, 2021 | Jan 26, 2021 |
| Redhat_linux | — | Upgrade sudoUpgrade sudo-debuginfoUpgrade sudo-develUpgrade sudo-debugsource | Jan 28, 2021 | Jan 26, 2021 |
| Suse | — | Upgrade sudo-testUpgrade sudo-develUpgrade sudoUpgrade sudo-plugin-python | Jan 28, 2021 | Jan 26, 2021 |
| Ubuntu | — | Upgrade sudo (Ubuntu Pro)Upgrade sudoUpgrade sudo-ldap | Jan 27, 2021 | Jan 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub