Known vulnerabilities in sudo (Red Hat package)

Vendor: Red Hat Inc.
Software: sudo (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:sudo_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 11
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting sudo (Red Hat package) sudo (Red Hat package) is affected by 11 known vulnerabilities: 11 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112067 - Protection Mechanism Failure
CVE-2025-32462		 CWE-693 Low
Available
No
 1.8.23-10.el7_9.4, 1.8.29-5.el8_2.3, 1.8.29-7.el8_4.3, 1.9.5p2-1.el8_6.1, 1.9.5p2-1.el8_8.1, 1.9.5p2-1.el8_10.1, 1.9.5p2-7.el9_0.5, 1.9.5p2-9.el9_2.3, 1.9.5p2-10.el9_4.1, 1.9.5p2-10.el9_6.1, 1.9.15-8.p5.el10_0.2 01.07.2025 SB2025070109
SB2025070111
SB2025070112
and 42 more
#VU112066 - Protection Mechanism Failure
CVE-2025-32463		 CWE-693 Low
Available
Exploited
 1.9.15-8.p5.el10_0.2 01.07.2025 SB2025070109
SB2025070182
SB2025070238
and 6 more
#VU85764 - Improper Authentication
CVE-2023-42465		 CWE-287 Low
No
No
 1.9.5p2-1.el8_6, 1.9.5p2-1.el8_8, 1.9.5p2-1.el8_9, 1.9.5p2-7.el9_0.4, 1.9.5p2-9.el9_2.2, 1.9.5p2-10.el9_3 24.01.2024 SB2024012432
SB2024012434
SB2024012435
and 32 more
#VU74197 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28487		 CWE-78 Low
No
No
 1.9.5p2-1.el8_6, 1.9.5p2-1.el8_8, 1.9.5p2-1.el8_9, 1.9.5p2-7.el9_0.4, 1.9.5p2-9.el9_2.2, 1.9.5p2-10.el9_3 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 28 more
#VU74196 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28486		 CWE-78 Low
No
No
 1.9.5p2-1.el8_6, 1.9.5p2-1.el8_8, 1.9.5p2-1.el8_9, 1.9.5p2-7.el9_0.4, 1.9.5p2-9.el9_2.2, 1.9.5p2-10.el9_3 30.03.2023 SB2023033028
SB2023033038
SB2023033039
and 31 more
#VU71332 - Improper input validation
CVE-2023-22809		 CWE-20 Low
Available
No
 1.8.6p3-29.el6_10.7, 1.8.19p2-12.el7_4.3, 1.8.23-3.el7_6.3, 1.8.23-4.el7_7.4, 1.8.23-10.el7_9.3, 1.8.25p1-8.el8_1.3, 1.8.29-5.el8_2.2, 1.8.29-7.el8_4.2, 1.8.29-8.el8_6.1, 1.8.29-8.el8_7.1, 1.9.5p2-7.el9_0.2, 1.9.5p2-7.el9_1.1 18.01.2023 SB20230118100
SB20230118104
SB20230118105
and 55 more
#VU50040 - Heap-based Buffer Overflow
CVE-2021-3156		 CWE-122 Low
Available
Exploited
 1.8.6p3-29.el6_10.4, 1.8.6p7-17.el7_2.3, 1.8.6p7-23.el7_3.3, 1.8.19p2-12.el7_4.2, 1.8.23-3.el7_6.2, 1.8.23-4.el7_7.3, 1.8.23-10.el7_9.1, 1.8.25p1-8.el8_1.2, 1.8.29-5.el8_2.1, 1.8.29-6.el8_3.1 26.01.2021 SB2021012632
SB2021012633
SB2021012634
and 55 more
#VU49883 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-23239		 CWE-59 Low
No
No
 1.8.29-7.el8 12.01.2021 SB2021011282
SB2021011283
SB20210120114
and 14 more
#VU49884 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-23240		 CWE-59 Low
No
No
 1.8.29-7.el8 12.01.2021 SB2021011284
SB2021011285
SB20210120114
and 11 more
#VU23783 - Permissions, Privileges, and Access Controls
CVE-2019-19232		 CWE-264 Low
No
No
 1.8.29-5.el8 20.12.2019 SB2019122025
SB2020041450
SB2020042839
and 4 more
#VU21782 - Permissions, Privileges, and Access Controls
CVE-2019-14287		 CWE-264 Low
Available
No
 1.8.6p3-15.el6_6.2 15.10.2019 SB2019101501
SB2019101502
SB2019101503
and 27 more