Search for packages
Package details: pkg:deb/ubuntu/sudo@1.8.31-1ubuntu1.1
purl pkg:deb/ubuntu/sudo@1.8.31-1ubuntu1.1
Next non-vulnerable version 1.8.31-1ubuntu1.2
Latest non-vulnerable version 1.8.31-1ubuntu1.2
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-6dre-2n2j-aaaj
Aliases:
CVE-2021-23239
The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.
1.8.31-1ubuntu1.2
Affected by 0 other vulnerabilities.
VCID-ce8c-ym9j-aaaq
Aliases:
CVE-2021-3156
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
1.8.31-1ubuntu1.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version