[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVDLL7HqoAvJtKtGRa0FBi15m3BO_5NAYgzx4IRrXO1A":3,"g5a-risk:CVE-2019-18634":225},{"success":4,"data":5,"meta":223},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":59,"references":60,"referencesCount":156,"weaknesses":157,"weaknessesCount":166,"isActivelyExploited":167,"cisaInfo":26,"otxData":26,"relatedBlogPosts":168,"seoMetadata":169,"configurations":194,"relatedVendorCves":214,"notableEvents":215},"CVE-2019-18634","What is CVE-2019-18634?","In Sudo before 1.8.26, if pwfeedback is enabled in \u002Fetc\u002Fsudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.","In Sudo before 1.8.26, if pwfeedback is enabled in \u002Fetc\u002Fsudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback ...","2020-01-29T18:15:12.247","2023-11-07T03:06:53.197",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.6,"MEDIUM",3.9,6.4,0.19276,[39,39,39,39,39,39,39],"High",[43,48,53,56],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"sudo_project","sudo","*","cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",4,[61,65,71,74,79,83,86,89,93,97,100,103,106,110,114,117,120,123,126,130,134,138,142,145,148,153],{"url":62,"source":63,"tags":64},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-02\u002Fmsg00029.html","Opensuse",[],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F156174\u002FSlackware-Security-Advisory-sudo-Updates.html","Packetstormsecurity",[69,70],"Third Party Advisory","VDB Entry",{"url":72,"source":67,"tags":73},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F156189\u002FSudo-1.8.25p-Buffer-Overflow.html",[69,70],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2020\u002FJan\u002F40","Seclists",[78,69],"Mailing List",{"url":80,"source":81,"tags":82},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F01\u002F30\u002F6","Openwall",[78,69],{"url":84,"source":81,"tags":85},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F01\u002F31\u002F1",[78,69],{"url":87,"source":81,"tags":88},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F02\u002F05\u002F2",[69],{"url":90,"source":81,"tags":91},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F02\u002F05\u002F5",[92,69],"Exploit",{"url":94,"source":95,"tags":96},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0487","Red Hat",[],{"url":98,"source":95,"tags":99},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0509",[],{"url":101,"source":95,"tags":102},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0540",[],{"url":104,"source":95,"tags":105},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2020:0726",[],{"url":107,"source":108,"tags":109},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F02\u002Fmsg00002.html","Debian",[78,69],{"url":111,"source":112,"tags":113},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FI6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F\u002F","Fedoraproject",[],{"url":115,"source":112,"tags":116},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FIY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC\u002F",[],{"url":118,"source":76,"tags":119},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2020\u002FFeb\u002F2",[78,69],{"url":121,"source":76,"tags":122},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2020\u002FFeb\u002F3",[78,69],{"url":124,"source":76,"tags":125},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2020\u002FJan\u002F44",[78,69],{"url":127,"source":128,"tags":129},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202003-12","Gentoo",[],{"url":131,"source":132,"tags":133},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20200210-0001\u002F","Netapp",[],{"url":135,"source":136,"tags":137},"https:\u002F\u002Fsupport.apple.com\u002Fkb\u002FHT210919","Apple",[69],{"url":139,"source":140,"tags":141},"https:\u002F\u002Fusn.ubuntu.com\u002F4263-1\u002F","Ubuntu",[],{"url":143,"source":140,"tags":144},"https:\u002F\u002Fusn.ubuntu.com\u002F4263-2\u002F",[],{"url":146,"source":108,"tags":147},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4614",[69],{"url":149,"source":150,"tags":151},"https:\u002F\u002Fwww.sudo.ws\u002Falerts\u002Fpwfeedback.html","Sudo",[92,152],"Vendor Advisory",{"url":154,"source":150,"tags":155},"https:\u002F\u002Fwww.sudo.ws\u002Fsecurity.html",[152],26,[158],{"id":159,"name":160,"description":161,"extendedDescription":162,"status":163,"abstraction":164,"structure":165},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":170,"metaDescription":171,"keywords":172,"canonicalUrl":173,"structuredData":174},"What is CVE-2019-18634? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-18634, a high severity cyber security vulnerability from 2020. In Sudo before 1.8.26, if pwfeedback is enabled in \u002Fetc\u002Fsud...","CVE-2019-18634, CVE-2019-18634 vulnerability, CVE-2019-18634 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, sudo_project security, debian security, sudo vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-18634",{"@context":175,"@type":176,"headline":170,"description":171,"datePublished":10,"dateModified":11,"author":177,"publisher":181,"about":185,"mainEntityOfPage":189,"articleSection":192,"keywords":193},"https:\u002F\u002Fschema.org","TechArticle",{"@type":178,"name":179,"url":180},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":178,"name":179,"url":180,"logo":182},{"@type":183,"url":184},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":186,"name":6,"description":187,"additionalType":188},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":190,"@id":191},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-18634","Cybersecurity","CVE-2019-18634, CVE-2019-18634 vulnerability, CVE-2019-18634 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[195,204],{"Operator":26,"Negate":26,"Nodes":196},[197],{"Operator":198,"Negate":26,"CPEMatch":199},"OR",[200],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":201,"VersionStartExcluding":26,"VersionStartIncluding":202,"VersionEndExcluding":203,"VersionEndIncluding":26},"D4B7DF92-891F-4E55-BE5D-759D8E68D501","1.7.1","1.8.26",{"Operator":26,"Negate":26,"Nodes":205},[206],{"Operator":198,"Negate":26,"CPEMatch":207},[208,210,212],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":209,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":211,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":213,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[216],{"id":217,"eventType":218,"eventTime":219,"details":220,"label":221,"color":222},"696d1546-8a9f-4c99-8595-07d9fef03a20","LOW_EPSS_DELTA","2026-06-16T04:06:03.872918+00:00","Daily EPSS score decreased by 0.686 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":224,"version":32},1792271612261,{"score":226,"band":227,"action":228,"scoredAt":229},48,"Medium","Plan remediation","2026-10-16T06:47:48.219788+00:00"]