Veille CVE

Recherche « Sudo project Sudo »

3 CVE

Critique 0 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Sudo project Sudo » ✕
  1. CVE-2026-82474 7.8 Élevée

    sudo-project sudo

    Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

  2. CVE-2025-32463 7.8 Élevée Exploitée

    Sudo project Sudo · Canonical ubuntu linux · Debian debian linux · Opensuse leap

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

  3. CVE-2021-3156 7.8 Élevée Exploitée

    Sudo project sudo · Fedoraproject fedora · Debian debian linux · Netapp active iq unified manager

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.