- Packages tracked
- 38,394
- Advisory records
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Awaiting triage
- 700
- Awaiting approval
- 0
728 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DSA-2070-1 | debian/freetype | freetype - several vulnerabilities | - | Awaiting triage | Evidence | None recorded |
| DSA-2105-1 | debian/freetype | freetype - several vulnerabilities | - | Awaiting triage | Evidence | None recorded |
| DSA-2116-1 | debian/freetype | freetype - integer overflow | - | Awaiting triage | Evidence | None recorded |
| DSA-2155-1 | debian/freetype | freetype - several | - | Awaiting triage | Evidence | None recorded |
| DSA-2294-1 | debian/freetype | freetype - missing input sanitization | - | Awaiting triage | Evidence | None recorded |
| DSA-2328-1 | debian/freetype | freetype - missing input sanitising | - | Awaiting triage | Evidence | None recorded |
| DSA-2350-1 | debian/freetype | freetype - missing input sanitising | - | Awaiting triage | Evidence | None recorded |
| DSA-2428-1 | debian/freetype | freetype - several | - | Awaiting triage | Evidence | None recorded |
| DSA-3188-1 | debian/freetype | freetype - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-3370-1 | debian/freetype | freetype - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-3461-1 | debian/freetype | freetype - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-3839-1 | debian/freetype | freetype - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-4777-1 | debian/freetype | freetype - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-5880-1 | debian/freetype | freetype - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-6168-1 | debian/freetype | freetype - security update | - | Awaiting triage | Evidence | None recorded |
| DTSA-139-1 | debian/freetype | freetype - multiple vulnerabilities | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2004-1051 | debian/sudo | sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2004-1689 | debian/sudo | sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2005-1119 | debian/sudo | Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2005-1993 | debian/sudo | Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2005-2959 | debian/sudo | Incomplete blacklist vulnerability in sudo 1.6.8 and earlier allows local users to gain privileges via the (1) SHELLOPTS and (2) PS4 environment variables before executing a bash script on behalf of another user, which are not cleared even though other variables are. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2005-4158 | debian/sudo | Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are inclu | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2005-4890 | debian/sudo | There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2006-0151 | debian/sudo | sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2008-3067 | debian/sudo | sudo in SUSE openSUSE 10.3 does not clear the stdin buffer when password entry times out, which might allow local users to obtain a password by reading stdin from the parent process after a sudo child process exits. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2009-0034 | debian/sudo | parse.c in sudo 1.6.9p17 through 1.6.9p19 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2010-0426 | debian/sudo | sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2010-0427 | debian/sudo | sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2010-1163 | debian/sudo | The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a Trojan | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2010-1646 | debian/sudo | The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2010-2956 | debian/sudo | Sudo 1.7.0 through 1.7.4p3, when a Runas group is configured, does not properly handle use of the -u option in conjunction with the -g option, which allows local users to gain privileges via a command line containing a "-u root" sequence. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2011-0010 | debian/sudo | check.c in sudo 1.7.x before 1.7.4p5, when a Runas group is configured, does not require a password for command execution that involves a gid change but no uid change, which allows local users to bypass an intended authentication requirement via the -g option to a sudo command. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2012-0809 | debian/sudo | Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2012-2337 | debian/sudo | sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2013-1775 | debian/sudo | sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2013-1776 | debian/sudo | sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard inpu | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2013-2776 | debian/sudo | sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another t | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2013-2777 | debian/sudo | sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling ter | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2014-0106 | debian/sudo | Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2014-9680 | debian/sudo | sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, disc | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2015-5602 | debian/sudo | sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt." | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2015-8239 | debian/sudo | The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2016-7032 | debian/sudo | sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2016-7076 | debian/sudo | sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execu | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2017-1000367 | debian/sudo | Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2017-1000368 | debian/sudo | Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2019-14287 | debian/sudo | In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2019-18634 | debian/sudo | In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2019-19232 | debian/sudo | In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as a u | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2019-19234 | debian/sudo | In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead of a password hash) is not considered, allowing an attacker (who has access to a Runas ALL sudoer account) to impersonate any blocked user. NOTE: The software maintainer believes | - | Awaiting triage | Evidence | None recorded |