Sploitus

CVE-2023-22809

32 known exploits for CVE-2023-22809

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

Affected products
Alt Linux, Almalinux, Astra Linux, Centos, Linuxmint, Apple Macos, Red Hat, Red Os
Sudo Project Sudo
< 1.9.12
Fix
Available
CVSS 3.1
7.8 HIGH
EPSS
55.4% (99th percentile)
Weakness
CWE-269
NVD status
Modified
Published
2023-01-18
CVE-2023-22809 at NVD
Authoritative description, scoring and affected products

32 known exploits for CVE-2023-22809

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2023-22809-sudo-POC
2026-08-27 KitPloitKITPLOIT
CVE-2023-22809
2026-08-27 KitPloitKITPLOIT
CVE-2023-22809-sudoedit-privesc
2026-08-27 KitPloitKITPLOIT
CVE-2023-22809
2026-08-27 KitPloitKITPLOIT
CVE-2023-22809-Exploiter
2026-08-27 KitPloitKITPLOIT
CVE-2023-22809
2026-08-27 KitPloitKITPLOIT
CVE-2023-22809
2026-08-27 KitPloitKITPLOIT
CVE-2023-22809
2026-08-26 KitPloitKITPLOIT
CVE-2023-22809
2026-08-26 KitPloitKITPLOIT
SUDO-privilege-escalation
2026-08-26 KitPloitKITPLOIT
linux-privesc-lab
2026-08-26 picodokiGITHUB
CVE-2023-22809-automated-python-exploits
2026-08-25 KitPloitKITPLOIT
patch_CVE-2023-22809
2026-08-25 KitPloitKITPLOIT
Exploit for Improper Privilege Management in Sudo_Project Sudo
2025-07-30 spidomanGITHUB
Exploit for Improper Privilege Management in Sudo_Project Sudo
2025-07-30 SpydomainGITHUB
Exploit for Improper Privilege Management in Sudo_Project Sudo
2024-08-28 D0rDa4aN919GITHUB
Cisco ThousandEyes Enterprise Agent Virtual Appliance Arbitrary File Modification Vulnerability
2023-08-20 Jim BecherZDT
Cisco ThousandEyes Enterprise Agent Virtual Appliance Arbitrary File Modification
2023-08-18 Jim Becher, korelogic.comPACKETSTORM
Exploit for Improper Privilege Management in Sudo_Project Sudo
2023-08-06 Toothless5143GITHUB
Exploit for Improper Privilege Management in Sudo_Project Sudo
2023-07-10 asepsaepdinGITHUB
Exploit for Improper Privilege Management in Sudo_Project Sudo
2023-06-20 Chan9Yan9GITHUB
Sudoedit Extra Arguments Privilege Escalation Exploit
2023-05-23 metasploitZDTRuby
Sudoedit Extra Arguments Privilege Escalation
2023-05-23 h00die, Matthieu Barjole, Victor Cutillas, metasploit.comPACKETSTORMRuby
Exploit for Improper Privilege Management in Sudo_Project Sudo
2023-04-06 3yujw7njaiGITHUB
Exploit for Improper Privilege Management in Sudo_Project Sudo
2023-04-06 CKevensGITHUB
sudo 1.8.0 to 1.9.12p1 - Privilege Escalation Exploit
2023-04-03 n3m1.sysZDTBash
sudo 1.8.0 to 1.9.12p1 - Privilege Escalation
2023-04-03 n3m1.sysEXPLOITDBBash
sudo 1.9.12p1 Privilege Escalation
2023-04-03 n3m1.sysPACKETSTORM
Exploit for Improper Privilege Management in Sudo_Project Sudo
2023-02-22 M4fiaB0yGITHUB
Exploit for Improper Privilege Management in Sudo_Project Sudo
2023-01-21 n3m1dotsysGITHUB
Exploit for Improper Privilege Management in Sudo_Project Sudo
2023-01-21 n3m1sysGITHUB
Sudoedit Extra Arguments Priv Esc
2023-01-18 h00die, Matthieu Barjole, Victor CutillasMETASPLOITRuby