Known vulnerabilities in sudo

Known vulnerabilities in sudo

Vendor: Amazon Web Services

Software: sudo

Software CPE: cpe:2.3:o:amazon_web_services:sudo:*:*:*:*:*:amazon_linux_ami:*:*

Website: https://aws.amazon.com/

Total vulnerabilities: 7

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU95409 - Permissions, Privileges, and Access Controls CVE-2024-31969	CWE-264	Low	No	No	1.8.23-10.59	06.08.2024	SB2024080630
#VU85764 - Improper Authentication CVE-2023-42465	CWE-287	Low	No	No	1.8.23-10.58, 1.8.23-10.59	24.01.2024	SB2024012432 SB2024012434 SB2024012435 and 32 more
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-28487	CWE-78	Low	No	No	1.8.23-10.59	30.03.2023	SB2023033028 SB2023033038 SB2023033039 and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-28486	CWE-78	Low	No	No	1.8.23-10.59	30.03.2023	SB2023033028 SB2023033038 SB2023033039 and 31 more
#VU72719 - Double Free CVE-2023-27320	CWE-415	Low	No	No	1.8.23-10.59	02.03.2023	SB2023030239 SB2023030240 SB2023033038 and 12 more
#VU71332 - Improper input validation CVE-2023-22809	CWE-20	Low	Available	No	1.8.23-10.57, 1.8.23-10.59	18.01.2023	SB20230118100 SB20230118104 SB20230118105 and 55 more
#VU68973 - Out-of-bounds write CVE-2022-43995	CWE-787	Low	No	No	1.8.23-10.59	05.11.2022	SB2022110501 SB2022110502 SB2022110729 and 17 more