Opendoas

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:opendoas_project:opendoas:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpendoas Project (5d5a1fc3-aed7-50d6-8875-d284c74cbe99)
ProductOpendoas (3cb381a3-a4df-5960-afe4-0efec19b75b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/duncaen/opendoas purl2cpe 2026-06-01 10:18:20.714424
pkg:github/nholstein/opendoas purl2cpe 2026-06-01 10:18:20.714427
pkg:rpm/fedora/opendoas purl2cpe 2026-06-01 10:18:20.714430
pkg:rpm/opensuse/opendoas purl2cpe 2026-06-01 10:18:20.714433

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28339 vulnerable 2026-06-08 06:01:10.379583 Details available
OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later.
Published: 2023-03-14T00:00:00.000Z
Updated: 2025-02-27T19:38:37.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-25016 vulnerable 2026-06-08 05:13:41.810012 Details available
In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules that only allowed to authenticated user to execute specific commands were not affected by this issue.
Published: 2021-01-28T19:38:24.000Z
Updated: 2024-08-05T03:00:19.238Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.