Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sudoUpgrade sudo-python-plugin | Feb 15, 2024 | Dec 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade sudo-debuginfoUpgrade sudo-develUpgrade sudo | Feb 8, 2024 | Dec 22, 2023 |
| Amazon_linux | — | Upgrade sudo | Feb 6, 2024 | Dec 22, 2023 |
| Amazon_linux_2023 | — | Upgrade sudo-logsrvdUpgrade sudo-python-plugin-debuginfoUpgrade sudoUpgrade sudo-python-pluginUpgrade sudo-debugsourceUpgrade sudo-debuginfoUpgrade sudo-logsrvd-debuginfoUpgrade sudo-devel | Feb 17, 2025 | Sep 5, 2023 |
| Debian | — | No solution existsUpgrade sudo | May 15, 2025 | Dec 22, 2023 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Jan 25, 2024 | Dec 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sudo | Mar 13, 2024 | Dec 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade sudo | Mar 13, 2024 | Dec 22, 2023 |
| Huawei Euleros 2_0_sp12 | — | Upgrade sudo | May 31, 2024 | Dec 22, 2023 |
| Oracle_linux | — | Upgrade sudoUpgrade sudo-python-plugin | Feb 14, 2024 | Sep 5, 2023 |
| Redhat_linux | — | Upgrade sudo-debugsourceUpgrade sudo-debuginfoNo solution existsUpgrade sudoUpgrade sudo-python-plugin-debuginfoUpgrade sudo-python-plugin | Feb 15, 2024 | Dec 22, 2023 |
| Suse | — | Upgrade sudoUpgrade sudo-testUpgrade sudo-plugin-pythonUpgrade sudo-devel | Mar 8, 2024 | Dec 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub