PT-2022-5350 · Sudo +5 · Sudo +5

🗓️ 28 Oct 2022 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 25 Views

Sudo versions 1.8.0 to 1.9.12 have a heap-based buffer error allowing denial of service attacks.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-1280, CVE-2023-0386, CVE-2022-4269, CVE-2022-2873, CVE-2022-4378)	16 Jun 202319:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Output Neutralization for Logs in the RHEL UBI (CVE-2023-28486)	5 Aug 202422:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Sudo Project Sudo [CVE-2023-28487]	3 Oct 202417:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux kernel, libssh, and Java can affect IBM Spectrum Protect Plus	22 Aug 202314:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management	12 Jan 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC is vulnerable to arbitrary code execution due to Linux Kernel	8 Jul 202417:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in SUDO affects IBM Integrated Analytics System (Sailfish)[CVE-2023-22809, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465]	27 May 202510:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a multiple vulnerabilities (CVE-2023-22809, CVE-2019-12490, CVE-2023-0041)	18 Sep 202320:04	–	ibm

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/sudoedit_bypass_priv_esc.rb
github	www.github.com/n3m1dotsys/CVE-2023-22809-sudoedit-privesc
github	www.github.com/n3m1sys/CVE-2023-22809-sudoedit-privesc
github	www.github.com/kiks7/CVE-2022-2602-Kernel-Exploit
github	www.github.com/LukeGix/CVE-2022-2602
github	www.github.com/CKevens/CVE-2023-22809-sudo-POC
github	www.github.com/3yujw7njai/CVE-2023-22809-sudo-POC
github	www.github.com/asepsaepdin/CVE-2023-22809
github	www.github.com/M4fiaB0y/CVE-2023-22809
github	www.github.com/sudo-project/sudo/commit/bd209b9f16fcd1270c13db27ae3329c677d48050

07 May 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.1 - 9.8

EPSS0.55367

SSVC

sudo software buffer over-read denial of service crypt password backend access restriction short passwords