CVE-2017-1000368

CVE-2017-1000368 affects Todd Miller’s sudo prior to 1.8.20p1 and earlier, due to input validation in get_process_ttyname() that parses /proc data. This can enable information disclosure and command execution via a local user with sudo privileges. Connected advisories show multiple distributions ...

CVE-2025-32462

CVE-2025-32462 affects sudo prior to 1.9.17p1. When used with a sudoers entry that specifies a host neither the current host nor ALL, listed users can execute commands on unintended machines. The Astra Linux bulletin reiterates this description. Connected advisories indicate a patched version is ...

CVE-2023-7090

CVE-2023-7090 describes a flaw in sudo where ipa_hostname from /etc/sssd/sssd.conf is not propagated, causing privilege mismanagement where client hosts may retain privileges after withdrawal. The issue is confirmed across multiple advisories (e.g., EulerOS sudo advisories) and is associated with...