Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sudo | Mar 21, 2024 | Feb 28, 2023 |
| Amazon_linux_2023 | — | Upgrade sudo-logsrvd-debuginfoUpgrade sudo-develUpgrade sudo-debuginfoUpgrade sudo-debugsourceUpgrade sudo-logsrvdUpgrade sudo-python-plugin-debuginfoUpgrade sudo-python-pluginUpgrade sudo | Feb 17, 2025 | Feb 28, 2023 |
| Debian | — | Upgrade sudo | Jul 30, 2024 | Feb 28, 2023 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Oct 2, 2023 | Feb 28, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sudo | Jul 5, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade sudo-testUpgrade sudo-develUpgrade sudo-plugin-pythonUpgrade sudo | Mar 30, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade sudoUpgrade sudo-ldap | Mar 22, 2023 | Feb 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub