- Packages tracked
- 38,394
- Advisory records
- 728
- Fixed in fork
- 13
- Fixed upstream
- 8
- In flight
- 6
- Awaiting triage
- 700
- Awaiting approval
- 0
728 matching records
| CVE | Project | Title | Fork fix | State | Evidence | Discussion |
|---|---|---|---|---|---|---|
| DEBIAN-CVE-2021-23239 | debian/sudo | The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2021-23240 | debian/sudo | selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not v | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2021-3156 | debian/sudo | Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2022-43995 | debian/sudo | Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. T | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2023-22809 | debian/sudo | In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affecte | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2023-27320 | debian/sudo | Sudo before 1.9.13p2 has a double free in the per-command chroot feature. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2023-28486 | debian/sudo | Sudo before 1.9.13 does not escape control characters in log messages. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2023-28487 | debian/sudo | Sudo before 1.9.13 does not escape control characters in sudoreplay output. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2023-42465 | debian/sudo | Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2023-7090 | debian/sudo | A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after retracting them. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2025-32462 | debian/sudo | Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2025-32463 | debian/sudo | Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2026-35535 | debian/sudo | In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2026-82474 | debian/sudo | Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2026-96512 | debian/sudo | A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an un | - | Awaiting triage | Evidence | None recorded |
| DLA-1011-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-160-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-1964-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-2094-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-2534-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-3181-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-3272-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-3732-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-382-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-4235-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-4472-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-707-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DLA-970-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-2006-1 | debian/sudo | sudo - several vulnerabilities | - | Awaiting triage | Evidence | None recorded |
| DSA-2062-1 | debian/sudo | sudo - environment sanitization bypass | - | Awaiting triage | Evidence | None recorded |
| DSA-2478-1 | debian/sudo | sudo - parsing error | - | Awaiting triage | Evidence | None recorded |
| DSA-2642-1 | debian/sudo | sudo - several issues | - | Awaiting triage | Evidence | None recorded |
| DSA-3167-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-3440-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-3867-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-4543-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-4614-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-4839-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-5321-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-5954-1 | debian/sudo | sudo - security update | - | Awaiting triage | Evidence | None recorded |
| DSA-596-2 | debian/sudo | sudo - missing input sanitising | - | Awaiting triage | Evidence | None recorded |
| DSA-735-1 | debian/sudo | sudo - pathname validation race | - | Awaiting triage | Evidence | None recorded |
| DSA-735-2 | debian/sudo | sudo - pathname validation race | - | Awaiting triage | Evidence | None recorded |
| DSA-870-1 | debian/sudo | sudo - missing input sanitising | - | Awaiting triage | Evidence | None recorded |
| DSA-946-2 | debian/sudo | sudo - missing input sanitising | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2004-0110 | debian/libxml2 | Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2004-0989 | debian/libxml2 | Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly hand | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2007-6284 | debian/libxml2 | The xmlCurrentChar function in libxml2 before 2.6.31 allows context-dependent attackers to cause a denial of service (infinite loop) via XML containing invalid UTF-8 sequences. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2008-3281 | debian/libxml2 | libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document. | - | Awaiting triage | Evidence | None recorded |
| DEBIAN-CVE-2008-3529 | debian/libxml2 | Heap-based buffer overflow in the xmlParseAttValueComplex function in parser.c in libxml2 before 2.7.0 allows context-dependent attackers to cause a denial of service (crash) or execute arbitrary code via a long XML entity name. | - | Awaiting triage | Evidence | None recorded |