Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/sudo@1.9.13p3-1%2Bdeb12u3
purl pkg:deb/debian/sudo@1.9.13p3-1%2Bdeb12u3
Next non-vulnerable version 1.9.17p2-5
Latest non-vulnerable version 1.9.17p2-5
Risk 3.4
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-m9xh-9ac2-eycq
Aliases:
CVE-2023-42465
A vulnerability has been discovered in sudo which can lead to execution manipulation through rowhammer-style memory manipulation.
1.9.16p2-3+deb13u1
Affected by 1 other vulnerability.
VCID-pwmy-f5qe-s3d1
Aliases:
CVE-2026-35535
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
1.9.17p2-5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (4)
Vulnerability Summary Aliases
VCID-3hfe-p6e3-tbe9 Multiple vulnerabilities have been found in sudo, the worst of which can result in root privilege escalation. CVE-2023-28487
VCID-e9ra-cfnz-m3hg A vulnerability has been discovered in sudo which could result in denial of service. CVE-2022-43995
VCID-ethj-8jmj-5fdh Multiple vulnerabilities have been found in sudo, the worst of which can result in root privilege escalation. CVE-2023-28486
VCID-ngg5-bqw7-bbc4 Multiple vulnerabilities have been discovered in sudo, the worst of which could result in privilege escalation. CVE-2025-32462

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:41:32.798304+00:00 Debian Importer Affected by VCID-pwmy-f5qe-s3d1 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:51:27.438784+00:00 Debian Importer Affected by VCID-m9xh-9ac2-eycq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:45:56.392722+00:00 Debian Importer Fixing VCID-e9ra-cfnz-m3hg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-15T23:13:18.060109+00:00 Debian Oval Importer Fixing VCID-3hfe-p6e3-tbe9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:46:42.650126+00:00 Debian Oval Importer Fixing VCID-ngg5-bqw7-bbc4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:39:50.532224+00:00 Debian Oval Importer Fixing VCID-ethj-8jmj-5fdh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-13T07:13:58.609728+00:00 Debian Importer Affected by VCID-pwmy-f5qe-s3d1 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T22:49:07.604843+00:00 Debian Oval Importer Fixing VCID-3hfe-p6e3-tbe9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:29:05.951074+00:00 Debian Oval Importer Fixing VCID-ngg5-bqw7-bbc4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:56:56.563724+00:00 Debian Importer Affected by VCID-m9xh-9ac2-eycq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:53:18.406168+00:00 Debian Importer Fixing VCID-e9ra-cfnz-m3hg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T15:27:41.539454+00:00 Debian Oval Importer Fixing VCID-ethj-8jmj-5fdh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T22:23:46.450064+00:00 Debian Oval Importer Fixing VCID-3hfe-p6e3-tbe9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:12:34.120612+00:00 Debian Oval Importer Fixing VCID-ngg5-bqw7-bbc4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:48:17.394348+00:00 Debian Importer Affected by VCID-pwmy-f5qe-s3d1 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-08T15:22:04.211010+00:00 Debian Oval Importer Fixing VCID-ethj-8jmj-5fdh https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-07T05:58:38.716684+00:00 Debian Importer Affected by VCID-m9xh-9ac2-eycq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-07T05:55:23.137479+00:00 Debian Importer Fixing VCID-e9ra-cfnz-m3hg https://security-tracker.debian.org/tracker/data/json 38.1.0