sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Crédito a Joe Vennix, de Apple Information Security, por encontrar el bug...

CVE-2025-32463-Sudo-Privilege-Escalation

CVE-2025-32463-Escalada-de-Privilegios-en-Sudo ✔️ Completado en HackViser VIP Challenge Este repositorio contiene un exploit funcional para CVE-2025-32463 , una vulnerabilidad crítica CVSS 9.3 que afecta a las versiones de sudo 1.9.14 → 1.9.17 y permite escalada de privilegios local a ROOT abusand...

needrestart-sudo-escalate-cve-2024-4890

CVE-2024-4890: PoC de escalada de privilegios de Sudo en needrestart Descargo de responsabilidad Solo para uso en laboratorio en entornos controlados. No explote en sistemas de producción sin autorización explícita. Este PoC tiene fines educativos únicamente. El autor no se hace responsable por...

CVE-2025-32463

Sudo version 1.9.17 has a critical vulnerability CVE-2025-32463 that allows local users to gain root access by exploiting the chroot option, which can lead to serious security risks. Users are advised to update to version 1.9.17p1 or later to mitigate this issue. Overview of the Sudo 1.9.17...

CVE-2023-22809

CVE-2023-22809 Youtube PoC: https://m.youtube.com/watch?v=b0UV7WgtKyI Este repositorio contiene el exploit para explotar CVE-2023-22809. La explotación depende de permitir a los usuarios sudo ejecutar sudoedit bajo sudo -l. Más detalles en la lista de correo de OpenWall. Acerca de Esto se realiza...

CVE-2021-3156-Baron-Samedit

CVE-2021-3156 - Laboratorio y Exploit "Baron Samedit" Este repositorio proporciona un entorno educativo autocontenido para comprender y explotar CVE-2021-3156 , un desbordamiento de búfer en el montón en sudo que permite a cualquier usuario no privilegiado obtener privilegios de root en sistemas...

sudo-chroot

Descripción: Sudo anterior a 1.9.17p1 permite a usuarios locales obtener acceso root porque /etc/nsswitch.conf de un directorio controlado por el usuario se utiliza con la opción --chroot. Sudo Privesc Local --chroot...

CentOS Linux 8.4 [TuxCare] Security Update: sudo / sudo-devel (CENTOS8.4:CLSA-2026:1777939719)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777939719 advisory. - In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the maile...

CentOS Linux 7 [TuxCare] Security Update: sudo / sudo-devel (CENTOS7:CLSA-2024:1713370315)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1713370315 advisory. - Sudo before 1.9.15 might allow row hammer attacks for authentication bypass or privilege escalation because application logic sometimes is base...

Rocky Linux 8 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource (crlsa-2026_11521)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202611521 advisory. sudo: Sudo: Privilege escalation due to failure in privilege drop calls CVE-2026-35535 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9.4 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-devel / etc (ciqsa-2026_0580)

The Rocky Linux 9.4 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260580 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 9.4. It addresses 1 CVE: CVE-2025-32462. Tenable has extracted the preceding description bloc...

Rocky Linux 8.6 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-devel Multiple Vulnerabilities (ciqsa-2026_0956)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260956 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-22809, CVE-2023-42465, CVE-2023-28486,...

Rocky Linux 10.2 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_19067)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619067 advisory. sudo: Sudo: Privilege escalation due to failure in privilege drop calls CVE-2026-35535 Tenable has extracted the preceding description block directly from the C...

Rocky Linux 9.2 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-devel / etc Multiple Vulnerabilities (ciqsa-2026_0969)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260969 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2023-42465, CVE-2023-28486, CVE-2023-28487. Tenable ha...

AlmaLinux 9.2 [TuxCare] Security Update: sudo / sudo-devel / sudo-python-plugin (ALMALINUX9.2:CLSA-2026:1778005006)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778005006 advisory. - In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the maile...

Rocky Linux 9.6 [TuxCare] Security Update: libipa_hbac / libipa_hbac-devel / libsss_autofs / libsss_certmap / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785345275)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785345275 advisory. - A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches th...

CentOS Linux 8.5 [TuxCare] Security Update: sudo / sudo-devel (CENTOS8.5:CLSA-2026:1777940187)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1777940187 advisory. - In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the maile...

Rocky Linux 9 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2023_0282)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20230282 advisory. sudo: arbitrary file write with privileges of the RunAs user CVE-2023-22809 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 10.0 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc Multiple Vulnerabilities (crlsa-2025_11537)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511537 advisory. sudo: LPE via host option CVE-2025-32462 sudo: LPE via chroot option CVE-2025-32463 Tenable has extracted the preceding description block directly from...

Rocky Linux 9.6 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (ciqsa-2026_1451)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261451 advisory. This advisory aggregates security fixes for the sudo SRPM in CIQ LTS 9.6. It addresses 1 CVE: CVE-2026-35535. Tenable has extracted the preceding description bloc...