Sudo

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:todd_miller:sudo:1.5.7:*:*:*:*:*:*:*

part: a version: 1.5.7 update: *

VendorTodd Miller (6e64c61d-ae67-5a3c-a0c7-5a9c304d6f92)
ProductSudo (ffec71ae-72fb-5429-b6f7-5160d870c451)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/millert/sudo purl2cpe 2026-06-01 10:15:50.051221
pkg:deb/debian/sudo purl2cpe 2026-06-01 10:15:50.051223
pkg:deb/ubuntu/sudo purl2cpe 2026-06-01 10:15:50.051225
pkg:github/millert/sudo purl2cpe 2026-06-01 10:15:50.051226
pkg:github/sudo-project/sudo purl2cpe 2026-06-01 10:15:50.051228
pkg:gitlab/redhat/sudo purl2cpe 2026-06-01 10:15:50.051230
pkg:rpm/fedora/sudo purl2cpe 2026-06-01 10:15:50.051232
pkg:rpm/opensuse/sudo purl2cpe 2026-06-01 10:15:50.051234

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0008 vulnerable 2026-06-08 04:56:32.977268 Details available
A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a system group (aka %group) in the sudoers file during authorization decisions for a user who belongs to that group, which allows local users to leverage an applicable sudoers file and gain root privileges via a sudo command. NOTE: this vulnerability exists because of a CVE-2009-0034 regression.
Published: 2011-01-20T18:00:00.000Z
Updated: 2024-08-06T21:36:02.454Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4305 vulnerable 2026-06-08 04:49:56.058690 Details available
Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat system call interposition, and consequently bypass access control policy and auditing.
Published: 2007-08-13T21:00:00.000Z
Updated: 2024-08-07T14:53:55.846Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0151 vulnerable 2026-06-08 04:48:46.053606 Details available
sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
Published: 2006-01-09T23:00:00.000Z
Updated: 2024-08-07T16:25:33.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4158 vulnerable 2026-06-08 04:48:43.108590 Details available
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
Published: 2005-12-11T02:00:00.000Z
Updated: 2024-08-07T23:38:50.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1993 vulnerable 2026-06-08 04:48:28.033960 Details available
Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
Published: 2005-06-20T04:00:00.000Z
Updated: 2024-08-07T22:06:57.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1119 vulnerable 2026-06-08 04:48:25.497968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1051 vulnerable 2026-06-08 04:47:52.593537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.