Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:ebuild/app-admin/sudo@1.8.15-r1

Type ebuild

Namespace app-admin

Name sudo

Version 1.8.15-r1

Qualifiers

Subpath

Is_vulnerable false

Next_non_vulnerable_version 1.8.20_p1

Latest_non_vulnerable_version 1.9.17_p1

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-7wk1-mmhr-jqet

vulnerability_id VCID-7wk1-mmhr-jqet

summary sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is defined using multiple wildcards in /etc/sudoers, as demonstrated by "/home/*/*/file.txt."

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5602.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5602.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2015-5602

reference_id

reference_type

scores

value	0.05506
scoring_system	epss
scoring_elements	0.90395
published_at	2026-06-04T12:55:00Z

value	0.05506
scoring_system	epss
scoring_elements	0.9041
published_at	2026-06-06T12:55:00Z

value	0.05506
scoring_system	epss
scoring_elements	0.90407
published_at	2026-06-07T12:55:00Z

value	0.05506
scoring_system	epss
scoring_elements	0.90406
published_at	2026-06-08T12:55:00Z

value	0.05506
scoring_system	epss
scoring_elements	0.90422
published_at	2026-06-09T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2015-5602

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5602
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5602

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1277426
reference_id	1277426
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1277426

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804149
reference_id	804149
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=804149

reference_url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/37710.txt
reference_id	CVE-2015-5602;OSVDB-125548
reference_type	exploit
scores
url	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/37710.txt

reference_url	https://security.gentoo.org/glsa/201606-13
reference_id	GLSA-201606-13
reference_type
scores
url	https://security.gentoo.org/glsa/201606-13

fixed_packages

url	pkg:ebuild/app-admin/sudo@1.8.15-r1
purl	pkg:ebuild/app-admin/sudo@1.8.15-r1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/app-admin/sudo@1.8.15-r1

aliases CVE-2015-5602

risk_score null

exploitability 2.0

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7wk1-mmhr-jqet

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-admin/sudo@1.8.15-r1

Package Instance