[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuEBKS-m2zda87KJn7S78JAYnXcrt5rmIl8ST1yvWP6k":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":83,"topProductsByCves":94,"seoMetadata":96,"meta":105},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},30621,"sudo_project",1,23,2,84,"2025-06-30","s",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},157735,"sudo","Sudo_project is a technology vendor with 1 tracked product and 23 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,29,36,42,47,52,60,66,72,78],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":28},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",7.8,"v3.1","High",0.99962,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":26,"severity":27,"isKev":34,"epssScore":35},"CVE-2019-14287","In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","2019-10-17",8.8,false,0.63764,{"cveId":37,"description":38,"publishedDate":13,"cvssScore":39,"cvssVersion":26,"severity":40,"isKev":4,"epssScore":41},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.",9.3,"Critical",0.55498,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":34,"epssScore":46},"CVE-2023-22809","In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a \"--\" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- \u002Fpath\u002Fto\u002Fextra\u002Ffile' value.","2023-01-18",0.55367,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":34,"epssScore":51},"CVE-2019-18634","In Sudo before 1.8.26, if pwfeedback is enabled in \u002Fetc\u002Fsudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.","2020-01-29",0.19276,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":57,"severity":58,"isKev":34,"epssScore":59},"CVE-2017-1000367","Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.","2017-06-05",6.4,"v3.0","Medium",0.08003,{"cveId":61,"description":62,"publishedDate":13,"cvssScore":63,"cvssVersion":26,"severity":64,"isKev":34,"epssScore":65},"CVE-2025-32462","Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.",2.8,"Low",0.04477,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":26,"severity":27,"isKev":34,"epssScore":71},"CVE-2023-27320","Sudo before 1.9.13p2 has a double free in the per-command chroot feature.","2023-02-28",7.2,0.01664,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":70,"cvssVersion":76,"severity":27,"isKev":34,"epssScore":77},"CVE-2015-5602","sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in \u002Fetc\u002Fsudoers, as demonstrated by \"\u002Fhome\u002F*\u002F*\u002Ffile.txt.\"","2015-11-17","v2",0.01516,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":34,"epssScore":82},"CVE-2002-0184","Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.","2002-05-16",0.01199,[84,89],{"cveId":37,"description":38,"publishedDate":13,"cvssScore":39,"cvssVersion":26,"severity":40,"isKev":4,"epssScore":41,"cisaVulnName":85,"cisaDateAdded":86,"cisaShortDescription":87,"cisaRequiredAction":88},"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":4,"epssScore":28,"cisaVulnName":90,"cisaDateAdded":91,"cisaShortDescription":92,"cisaRequiredAction":93},"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.","Apply updates per vendor instructions.",[95],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":97,"metaDescription":98,"keywords":99,"structuredData":100},"Sudo_project - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sudo_project covering 1 product with 23 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sudo_project vulnerabilities, Sudo_project security, Sudo_project CVE, Sudo_project threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Sudo_project KEV, Sudo_project exploited vulnerabilities",{"@context":101,"@type":102,"name":103,"description":98,"url":104},"https:\u002F\u002Fschema.org","Organization","Sudo_project","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsudo_project",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":106,"apiVersion":107},"2026-10-17T21:13:33.831Z","3.0"]