CVE-2023-42465

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Affected products

Alt Linux, Almalinux, Centos, Debian, Red Hat, Red Os, Sudo, Suse

Sudo Project Sudo

< 1.9.15

Fix

Available

CVSS 3.1

7.0 HIGH

EPSS

0.5% (42th percentile)

NVD status

Modified

Published

2023-12-22

No exploit for CVE-2023-42465 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.