Sudo Project Sudo 1.9.12 Patch 2

CPE Details

Sudo Project Sudo 1.9.12 Patch 2
sudo_project
sudo
1.9.12
2023-03-07
15h41 +00:00
2023-03-21
15h32 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:sudo_project:sudo:1.9.12:p2:*:*:*:*:*:*

Informations

Vendor

sudo_project

Product

sudo

Version

1.9.12

Update

p2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-42465 2023-12-21 23h00 +00:00 Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.
7
High
CVE-2023-28486 2023-03-15 23h00 +00:00 Sudo before 1.9.13 does not escape control characters in log messages.
5.3
Medium
CVE-2023-28487 2023-03-15 23h00 +00:00 Sudo before 1.9.13 does not escape control characters in sudoreplay output.
5.3
Medium
CVE-2023-27320 2023-02-28 00h00 +00:00 Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
7.2
High