IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.8Alta

CVE-2026-82474Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

sudo-project sudo Publicada: (hace 2 meses)

Descripción

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.

Debilidad (CWE): CWE-693

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
sudo-project sudo ≤ 1.9.17p2

Referencias y parches

CVE recientes del mismo producto — sudo

7.4Alta
CVE-2026-35535
Sudo project Sudo; Siemens RUGGEDCOM RST2428P; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

2.8Baja
CVE-2025-32462
Sudo project Sudo; Siemens SIDIS Secured SmartPlug

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

4.5%EPSS
7.8Alta
CVE-2021-3156 KEV

Sudo Heap-Based Buffer Overflow Vulnerability

sudo project sudo; fedoraproject fedora; debian debian linux; netapp active iq unified manager

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

100%EPSS