Vulnerability identifier: #VU24810

Vulnerability risk: Low

CVSSv3.1: 7.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2019-18634

CWE-ID: CWE-121

Exploitation vector: Local

Exploits in database: 11

• August 1, 2021
  • CVE-2019-18634 (My n-day exploit for CVE-2019-18634 (local privilege escalation)) [Github]
• June 17, 2021
  • Sudo 1.8.25p - Buffer Overflow [Exploit-DB]
• May 13, 2021
  • CVEPedia (A compilation of well-known CVEs and their one-liner ready to run.) [Github]
• April 28, 2021
  • CVE-2019-18634 (exploit) [Github]
• December 16, 2020
  • CVE-Exploits (PoC exploits for software vulnerabilities) [Github]
• November 12, 2020
  • CVE-2019-18634 (exploit for sudo CVE-2019-18634) [Github]
• March 26, 2020
  • SUDO_KILLER (A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regu [Github]
• March 18, 2020
  • CVE-2019-18634 (An Python Exploit for Sudo vulnerability CVE-2019-18634) [Github]
  • CVE-POCs (My attempt at writing exploit POCs for various CVEs) [Github]
  • CVE-2019-18634 (A functional exploit for CVE-2019-18634, a BSS overflow in sudo's pwfeedback feature that allows for for privesc) [Github]
  • CVE-2019-18634 (sudo exploit for CVE-2019-18634) [Github]

Impact: Code execution

Vulnerable software:
Sudo
Client/Desktop applications / Software for system administration

Vendor: Sudo