CPE Details
Sudo Project Sudo 1.9.12 Patch 2
1.9.12
2023-03-07
15h41 +00:00
15h41 +00:00
2023-03-21
15h32 +00:00
15h32 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:sudo_project:sudo:1.9.12:p2:*:*:*:*:*:*
Informations
Vendor
sudo_projectProduct
sudoVersion
1.9.12Update
p2Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit. | 7 |
Haute |
||
| Sudo before 1.9.13 does not escape control characters in log messages. | 5.3 |
Moyen |
||
| Sudo before 1.9.13 does not escape control characters in sudoreplay output. | 5.3 |
Moyen |
||
| Sudo before 1.9.13p2 has a double free in the per-command chroot feature. | 7.2 |
Haute |
