Privilege Escalation

🗓️ 20 Jan 2023 21:08:45Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 32 Views

sudo vulnerability in Privilege Escalation due to mishandled extra argument

Reporter	Title	Published	Views	Family All 278
0day.today	sudo 1.8.0 to 1.9.12p1 - Privilege Escalation Exploit	3 Apr 202300:00	–	zdt
0day.today	Sudoedit Extra Arguments Privilege Escalation Exploit	23 May 202300:00	–	zdt
0day.today	Cisco ThousandEyes Enterprise Agent Virtual Appliance Arbitrary File Modification Vulnerability	20 Aug 202300:00	–	zdt
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	30 Jul 202509:48	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	10 Jul 202306:38	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	28 Aug 202414:22	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	6 Aug 202306:46	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	6 Apr 202303:11	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	6 Apr 202303:11	–	githubexploit
GithubExploit	Exploit for Improper Privilege Management in Sudo_Project Sudo	20 Jun 202300:38	–	githubexploit

Vulners

Node

focal focalMatch1.8.31-1ubuntu1.1debian

AND

focal focalMatch1.8.31-1ubuntu1debian

AND

debian debian_linux

google bionicMatch1.8.21p2-3ubuntu1.2debian

AND

google bionicMatch1.8.21p2-3ubuntu1.3debian

AND

google bionicMatch1.8.21p2-3ubuntu1debian

AND

google bionicMatch1.8.21p2-3ubuntu1.4debian

AND

debian debian_linux

sudo sudoMatch1.9.7_p1-r1os

AND

sudo sudoMatch1.9.6_p1-r1os

AND

alpinelinux alpine_linuxMatch3.14

sudo sudoMatch1.9.12_p1-r1os

AND

alpinelinux alpine_linuxMatch3.17

sudo sudoMatch1.9.6_p1-r1os

AND

sudo sudoMatch1.9.9-r1os

AND

sudo sudoMatch1.9.7_p1-r1os

AND

sudo sudoMatch1.8.31-r0os

AND

sudo sudoMatch1.9.8_p1-r0os

AND

sudo sudoMatch1.9.12_p1-r1os

AND

sudo sudoMatch1.9.8_p2-r0os

AND

sudo sudoMatch1.9.6_p1-r0os

AND

sudo sudoMatch1.9.0-r0os

AND

sudo sudoMatch1.9.10-r0os

AND

sudo sudoMatch1.8.31p1-r0os

AND

sudo sudoMatch1.9.11_p3-r0os

AND

sudo sudoMatch1.9.5p2-r0os

AND

sudo sudoMatch1.9.8_p2-r1os

AND

sudo sudoMatch1.9.7_p2-r0os

AND

sudo sudoMatch1.8.31p1-r1os

AND

alpinelinux alpine_linuxMatchedge

sudo sudoMatch1.9.8_p2-r0os

AND

sudo sudoMatch1.9.8_p2-r1os

AND

alpinelinux alpine_linuxMatch3.15

devel develMatch1.9.5p2-3ubuntu2debian

AND

devel develMatch1.9.3p1-1ubuntu1debian

AND

devel develMatch1.9.1-1ubuntu1debian

AND

devel develMatch1.9.5p2-2ubuntu3debian

AND

debian debian_linux

sudo sudoMatch1.9.3p1-1debian

AND

debian debian_linuxMatch11

sudo sudoMatch1.9.3p1-1debian

AND

debian debian_linuxMatch999

sudo sudoMatch1.8.27-1+deb10u3debian

AND

sudo sudoMatch1.8.27-1+deb10u2debian

AND

debian debian_linuxMatch10

sudo sudoMatch1.8.29_5.el8

sudo sudoMatch1.7.2p2_9.el6

sudo sudoMatch1.8.25p1_7.el8

sudo sudoMatch1.8.19p2_14.el7_5

sudo sudoMatch1.8.6p3_27.el6

sudo sudoMatch1.8.6p3_19.el6

sudo sudoMatch1.7.4p5_13.el6_3

sudo sudoMatch1.8.23_4.el7_7.2

sudo sudoMatch1.8.6p3_12.el6

sudo sudoMatch1.7.4p5_7.el6

sudo sudoMatch1.7.4p5_9.el6_2

sudo sudoMatch1.8.25p1_8.el8_1

sudo sudoMatch1.8.23_4.el7

sudo sudoMatch1.8.23_9.el7

sudo sudoMatch1.8.29_6.el8_3.1

sudo sudoMatch1.7.4p5_12.el6_3

sudo sudoMatch1.8.19p2_12.el7_4

sudo sudoMatch1.8.6p3_24.el6

sudo sudoMatch1.8.6p3_25.el6_8

sudo sudoMatch1.8.29_7.el8_4.1

sudo sudoMatch1.8.6p3_28.el6_9

sudo sudoMatch1.8.25p1_4.el8

sudo sudoMatch1.7.4p5_5.el6

sudo sudoMatch1.8.6p3_20.el6_7

sudo sudoMatch1.8.29_7.el8

sudo sudoMatch1.8.23_3.el7

sudo sudoMatch1.8.29_6.el8

sudo sudoMatch1.8.23_4.el7_7.1

sudo sudoMatch1.8.6p3_7.el6

sudo sudoMatch1.8.6p3_15.el6

sudo sudoMatch1.8.25p1_8.el8_1.1

sudo sudoMatch1.7.4p5_11.el6

Source	Link
seclists	www.seclists.org/fulldisclosure/2023/Aug/21
lists	www.lists.debian.org/debian-lts-announce/2023/01/msg00012.html
git	www.git//git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2023-22809
debian	www.debian.org/security/2023/dsa-5321
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/G4YNBTTKTRT2ME3NTSXAPTOKYUE47XHZ/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QDGFCGAV5QRJCE6IXRXIS4XJHS57DDH/
security	www.security.gentoo.org/glsa/202305-12
packetstormsecurity	www.packetstormsecurity.com/files/171644/sudo-1.9.12p1-Privilege-Escalation.html

04 Apr 2025 18:58Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

EPSS0.44372

SSVC