|
Identifier
|
Related Record |
Severity
|
Date Published
|
Description | Versions Affected |
|---|---|---|---|---|---|
| CVE-2026-35535 | BDSA-2026-6521 | High | Apr 03, 2026 | In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a more... |
1.9.17, 1.9.14, 1.9.11, 1.9.5, 1.9.4, 1.9.3, 1.9.2, 1.9.0, 1.8.31, 1.8.30
|
| CVE-2025-32463 | BDSA-2025-5776 | High | Jun 30, 2025 | Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot opt more... |
1.9.17, 1.9.14
|
| CVE-2025-32462 | BDSA-2025-5777 | High | Jun 30, 2025 | Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute comm more... |
1.9.17, 1.9.14, 1.9.11, 1.9.5, 1.9.4, 1.9.3, 1.9.2, 1.9.0, 1.8.31, 1.8.30
|
| BDSA-2025-124009 | Low | Mar 13, 2026 | Sudo is vulnerable to privilege escalation due to incorrect return code checks when dropping privileges to run the mailer. This could allow an attacker more... |