Sudo before 1.9.13 does not escape control characters in log messages.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sudoUpgrade sudo-python-plugin | Feb 15, 2024 | Mar 16, 2023 |
| Alpine Linux | — | Upgrade sudo | Mar 21, 2024 | Mar 16, 2023 |
| Amazon Linux Ami 2 | — | Upgrade sudoUpgrade sudo-develUpgrade sudo-debuginfo | Oct 23, 2023 | Mar 16, 2023 |
| Amazon_linux_2023 | — | Upgrade sudoUpgrade sudo-develUpgrade sudo-logsrvd-debuginfoUpgrade sudo-debuginfoUpgrade sudo-debugsourceUpgrade sudo-logsrvdUpgrade sudo-python-pluginUpgrade sudo-python-plugin-debuginfo | Feb 17, 2025 | Mar 16, 2023 |
| Debian | — | Upgrade sudo | Feb 5, 2024 | Mar 16, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Oct 2, 2023 | Mar 16, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sudo | May 9, 2023 | Mar 16, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sudo | Jan 10, 2024 | Mar 16, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade sudo | Jul 23, 2024 | Mar 16, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sudo | Jul 17, 2024 | Mar 16, 2023 |
| Oracle_linux | — | Upgrade sudoUpgrade sudo-python-plugin | Feb 14, 2024 | Mar 16, 2023 |
| Redhat_linux | — | Upgrade sudoUpgrade sudo-python-pluginNo solution existsUpgrade sudo-python-plugin-debuginfoUpgrade sudo-debugsourceUpgrade sudo-debuginfo | Feb 15, 2024 | Mar 16, 2023 |
| Suse | — | Upgrade sudo-testUpgrade sudoUpgrade sudo-plugin-pythonUpgrade sudo-devel | Mar 30, 2023 | Mar 16, 2023 |
| Ubuntu | — | Upgrade sudo-ldapUpgrade sudo (Ubuntu Pro)Upgrade sudoUpgrade sudo-ldap (Ubuntu Pro) | Apr 17, 2023 | Mar 16, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 16, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub