Search for vulnerabilities
Vulnerability details: VCID-jecg-uwm7-ykcp
Vulnerability ID VCID-jecg-uwm7-ykcp
Aliases CVE-2012-0809
Summary sudo: format string flaw in sudo_debug()
Status Published
Exploitability 2.0
Weighted Severity 0.5
Risk 1.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-134 Use of Externally-Controlled Format String
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
System Score Found at
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
epss 0.60737 https://api.first.org/data/v1/epss?cve=CVE-2012-0809
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0809.json
https://api.first.org/data/v1/epss?cve=CVE-2012-0809
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0809
657985 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657985
784443 https://bugzilla.redhat.com/show_bug.cgi?id=784443
CVE-2012-0809;OSVDB-78659 Exploit http://seclists.org/fulldisclosure/2012/Jan/att-590/advisory_sudo.txt
CVE-2012-0809;OSVDB-78659 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/25134.c
OSVDB-78659;CVE-2012-0809 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/18436.txt
Data source Exploit-DB
Date added May 1, 2013
Description sudo 1.8.0 < 1.8.3p1 - 'sudo_debug' glibc FORTIFY_SOURCE Bypass + Privilege Escalation
Ransomware campaign use Known
Source publication date May 1, 2013
Exploit type local
Platform linux
Source update date June 21, 2017
Source URL http://seclists.org/fulldisclosure/2012/Jan/att-590/advisory_sudo.txt
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.98203
EPSS Score 0.60737
Published At July 31, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T11:24:26.250078+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0809.json 37.0.0