Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

Sudo

Source -

CISA

BOS Name -

N/A

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

2

NVD CVEs -

0
Related CVEsRelated ProductsRelated AssignersReports
2Vulnerabilities found
CVE-2025-32463
Assigner-MITRE Corporation
ShareView Details
Assigner-MITRE Corporation
CVSS Score-9.3||CRITICAL
EPSS-48.24% / 98.73%
||
7 Day CHG+0.77%
Published-30 Jun, 2025 | 00:00
Updated-26 Feb, 2026 | 17:50
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2025-10-20||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Action-Not Available
Vendor-sudo_projectSudo projectSudoopenSUSECanonical Ltd.Red Hat, Inc.SUSEDebian GNU/Linux
Product-linux_enterprise_server_for_sapenterprise_linuxdebian_linuxubuntu_linuxlinux_enterprise_desktopsudoleaplinux_enterprise_real_timeSudoSudo
CWE ID-CWE-829
Inclusion of Functionality from Untrusted Control Sphere
CVE-2021-3156
Assigner-MITRE Corporation
ShareView Details
Assigner-MITRE Corporation
CVSS Score-7.8||HIGH
EPSS-99.30% / 99.93%
||
7 Day CHG~0.00%
Published-26 Jan, 2021 | 00:00
Updated-10 Nov, 2025 | 14:41
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Known KEV||Action Due Date - 2022-04-27||Apply updates per vendor instructions.

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Action-Not Available
Vendor-sudo_projectn/aSudoDebian GNU/LinuxNetApp, Inc.McAfee, LLCOracle CorporationSynology, Inc.Fedora ProjectBeyondTrust Corporation
Product-micros_es400diskstation_manager_unified_controllercloud_backupweb_gatewayskynas_firmwarevs960hd_firmwaredebian_linuxmicros_workstation_6_firmwaresudomicros_es400_firmwarefedoraprivilege_management_for_unix\/linuxontap_select_deploy_administration_utilityactive_iq_unified_managermicros_workstation_5a_firmwaremicros_compact_workstation_3_firmwaremicros_kitchen_display_systemprivilege_management_for_macsolidfiremicros_compact_workstation_3oncommand_unified_manager_core_packagediskstation_managervs960hdhci_management_nodeontap_toolsmicros_workstation_6communications_performance_intelligence_centermicros_kitchen_display_system_firmwaretekelec_platform_distributionmicros_workstation_5askynasn/aSudo
CWE ID-CWE-193
Off-by-one Error