[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzp6AW3fAk-x8tAOkdpaB7-miSWdWUuTlvzneqikmWts":3,"g5a-family:sudo_project\u002Fsudo":366,"g5a-ex:sudo_project\u002Fsudo@*":367},{"success":4,"data":5},true,{"product":6,"versions":186,"topVulnerabilitiesByEpss":271,"kevVulnerabilities":333,"seoMetadata":344,"meta":363},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":185},"sudo_project","sudo",84,23,2,"2025-06-30",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.0",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.1",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.2",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.3",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.4",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.6",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.7",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.8",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.9",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.0",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.1",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.2",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.3",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.4",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.5",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.6",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.7",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.8",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.9",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.0",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.1",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.10",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.2",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.3",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.4",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.5",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.6",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.7",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.8",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.9",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.0",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.1",{"version":87,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.10",1,{"version":90,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.11",{"version":92,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.12",{"version":94,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.13",{"version":96,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.14",{"version":98,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.15",{"version":100,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.16",{"version":102,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.17",{"version":104,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.18",{"version":106,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.19",{"version":108,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.2",{"version":110,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.20",{"version":112,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.21",{"version":114,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.22",{"version":116,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.23",{"version":118,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.24",{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.25",{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.26",{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.27",{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.28",{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.29",{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.3",{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.30",{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.31",{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.32",{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.4",{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.5",{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.6",{"version":144,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.7",{"version":146,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.8",{"version":148,"cve_count":88,"kev_count":16,"has_kev":17},"1.8.9",{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.0",{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.1",{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.10",{"version":156,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.11",{"version":158,"cve_count":11,"kev_count":16,"has_kev":17},"1.9.12",{"version":160,"cve_count":88,"kev_count":16,"has_kev":17},"1.9.13",{"version":162,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.14",{"version":164,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.15",{"version":166,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.16",{"version":168,"cve_count":11,"kev_count":88,"has_kev":4},"1.9.17",{"version":170,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.2",{"version":172,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.3",{"version":174,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.4",{"version":176,"cve_count":88,"kev_count":88,"has_kev":4},"1.9.5",{"version":178,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.6",{"version":180,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.7",{"version":182,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.8",{"version":184,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.9","Sudo by Sudo Project is a technology product with 84 tracked versions and 23 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":88,"kev_count":16,"has_kev":17},{"version":90,"cve_count":88,"kev_count":16,"has_kev":17},{"version":92,"cve_count":88,"kev_count":16,"has_kev":17},{"version":94,"cve_count":88,"kev_count":16,"has_kev":17},{"version":96,"cve_count":88,"kev_count":16,"has_kev":17},{"version":98,"cve_count":88,"kev_count":16,"has_kev":17},{"version":100,"cve_count":16,"kev_count":16,"has_kev":17},{"version":102,"cve_count":16,"kev_count":16,"has_kev":17},{"version":104,"cve_count":16,"kev_count":16,"has_kev":17},{"version":106,"cve_count":16,"kev_count":16,"has_kev":17},{"version":108,"cve_count":16,"kev_count":16,"has_kev":17},{"version":110,"cve_count":88,"kev_count":16,"has_kev":17},{"version":112,"cve_count":16,"kev_count":16,"has_kev":17},{"version":114,"cve_count":16,"kev_count":16,"has_kev":17},{"version":116,"cve_count":16,"kev_count":16,"has_kev":17},{"version":118,"cve_count":16,"kev_count":16,"has_kev":17},{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},{"version":136,"cve_count":16,"kev_count":16,"has_kev":17},{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},{"version":144,"cve_count":16,"kev_count":16,"has_kev":17},{"version":146,"cve_count":88,"kev_count":16,"has_kev":17},{"version":148,"cve_count":88,"kev_count":16,"has_kev":17},{"version":150,"cve_count":16,"kev_count":16,"has_kev":17},{"version":152,"cve_count":16,"kev_count":16,"has_kev":17},{"version":154,"cve_count":16,"kev_count":16,"has_kev":17},{"version":156,"cve_count":16,"kev_count":16,"has_kev":17},{"version":158,"cve_count":11,"kev_count":16,"has_kev":17},{"version":160,"cve_count":88,"kev_count":16,"has_kev":17},{"version":162,"cve_count":16,"kev_count":16,"has_kev":17},{"version":164,"cve_count":16,"kev_count":16,"has_kev":17},{"version":166,"cve_count":16,"kev_count":16,"has_kev":17},{"version":168,"cve_count":11,"kev_count":88,"has_kev":4},{"version":170,"cve_count":16,"kev_count":16,"has_kev":17},{"version":172,"cve_count":16,"kev_count":16,"has_kev":17},{"version":174,"cve_count":16,"kev_count":16,"has_kev":17},{"version":176,"cve_count":88,"kev_count":88,"has_kev":4},{"version":178,"cve_count":16,"kev_count":16,"has_kev":17},{"version":180,"cve_count":16,"kev_count":16,"has_kev":17},{"version":182,"cve_count":16,"kev_count":16,"has_kev":17},{"version":184,"cve_count":16,"kev_count":16,"has_kev":17},[272,280,286,292,297,302,310,316,322,328],{"cveId":273,"description":274,"publishedDate":275,"cvssScore":276,"cvssVersion":277,"severity":278,"isKev":4,"epssScore":279},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",7.8,"v3.1","High",0.99962,{"cveId":281,"description":282,"publishedDate":283,"cvssScore":284,"cvssVersion":277,"severity":278,"isKev":17,"epssScore":285},"CVE-2019-14287","In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","2019-10-17",8.8,0.63764,{"cveId":287,"description":288,"publishedDate":12,"cvssScore":289,"cvssVersion":277,"severity":290,"isKev":4,"epssScore":291},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.",9.3,"Critical",0.55498,{"cveId":293,"description":294,"publishedDate":295,"cvssScore":276,"cvssVersion":277,"severity":278,"isKev":17,"epssScore":296},"CVE-2023-22809","In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- \u002Fpath\u002Fto\u002Fextra\u002Ffile' value.","2023-01-18",0.55367,{"cveId":298,"description":299,"publishedDate":300,"cvssScore":276,"cvssVersion":277,"severity":278,"isKev":17,"epssScore":301},"CVE-2019-18634","In Sudo before 1.8.26, if pwfeedback is enabled in \u002Fetc\u002Fsudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.","2020-01-29",0.19276,{"cveId":303,"description":304,"publishedDate":305,"cvssScore":306,"cvssVersion":307,"severity":308,"isKev":17,"epssScore":309},"CVE-2017-1000367","Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.","2017-06-05",6.4,"v3.0","Medium",0.08003,{"cveId":311,"description":312,"publishedDate":12,"cvssScore":313,"cvssVersion":277,"severity":314,"isKev":17,"epssScore":315},"CVE-2025-32462","Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.",2.8,"Low",0.04477,{"cveId":317,"description":318,"publishedDate":319,"cvssScore":320,"cvssVersion":277,"severity":278,"isKev":17,"epssScore":321},"CVE-2023-27320","Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","2023-02-28",7.2,0.01664,{"cveId":323,"description":324,"publishedDate":325,"cvssScore":320,"cvssVersion":326,"severity":278,"isKev":17,"epssScore":327},"CVE-2015-5602","sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in \u002Fetc\u002Fsudoers, as demonstrated by \"\u002Fhome\u002F*\u002F*\u002Ffile.txt.\"","2015-11-17","v2",0.01516,{"cveId":329,"description":330,"publishedDate":331,"cvssScore":276,"cvssVersion":277,"severity":278,"isKev":17,"epssScore":332},"CVE-2002-0184","Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.","2002-05-16",0.01199,[334,339],{"cveId":287,"description":288,"publishedDate":12,"cvssScore":289,"severity":290,"isKev":4,"epssScore":291,"cisaVulnName":335,"cisaDateAdded":336,"cisaShortDescription":337,"cisaRequiredAction":338},"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":273,"description":274,"publishedDate":275,"cvssScore":276,"severity":278,"isKev":4,"epssScore":279,"cisaVulnName":340,"cisaDateAdded":341,"cisaShortDescription":342,"cisaRequiredAction":343},"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.","Apply updates per vendor instructions.",{"title":345,"metaDescription":346,"keywords":347,"structuredData":348},"Sudo by Sudo Project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sudo by Sudo Project covering 84 versions with 23 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sudo vulnerabilities, Sudo security, Sudo CVE, Sudo Project Sudo, Sudo threat intelligence, Sudo Project security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sudo KEV, Sudo exploited vulnerabilities",{"@context":349,"@type":350,"name":351,"description":346,"url":352,"manufacturer":353,"applicationCategory":357,"softwareVersion":358,"mainEntity":359},"https:\u002F\u002Fschema.org","SoftwareApplication","Sudo","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsudo_project\u002Fsudo",{"@type":354,"name":355,"url":356},"Organization","Sudo Project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsudo_project","Security Software","84 versions tracked",{"@type":360,"name":361,"description":362,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sudo Security Vulnerabilities","Security vulnerabilities affecting Sudo by Sudo Project",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":364,"apiVersion":365},"2026-10-17T21:13:33.736Z","3.0",[],{"rows":368,"total":11,"capped":17,"failed":16},[369,374],{"cveId":287,"name":335,"severity":290,"cvss":289,"added":336,"epss":291,"published":370,"ranges":371,"checked":4,"hits":373,"covers":17},"2025-06-30T21:15:30.257",[372,168],"1.9.14 to before 1.9.17",[],{"cveId":273,"name":340,"severity":278,"cvss":276,"added":341,"epss":279,"published":375,"ranges":376,"checked":4,"hits":380,"covers":17},"2021-01-26T21:15:12.987",[377,378,176,379],"1.8.2 to before 1.8.32","1.9.0 to before 1.9.5","1.9.5-patch1",[]]