Exploit for CVE-2023-22809

kitploit · 2026-08-26

Description

Local privilege escalation in sudo 1.8.0 to 1.9.12p1 via /etc/passwd or /etc/sudoers modification.

Affected Sudo Project Sudo versions

Sudo Project Sudo< 1.9.12

All known vulnerabilities by product

Alt Linux Almalinux Astra Linux Centos Linuxmint Apple Macos Red Hat Red Os

CVSS 7.8 for CVE-2023-22809

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

55.4%higher than 99.0% of all CVEs

Updated 2026-08-27

CVE Information

Exploit Details

Modified:2026-08-26 07:35

Last Seen:2026-08-26 10:08

Reporter:KitPloit

Tags

sudolocal privilege escalationpasswd modificationsudoers modificationroot usernamepasswordless sudoers

Other exploits for CVE-2023-22809

2026-08-27 KitPloitKITPLOIT

CVE-2023-22809-sudo-POC

2026-08-27 KitPloitKITPLOIT

CVE-2023-22809-Exploiter

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

CVE-2023-22809-sudoedit-privesc

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

Exploit Code

MARKDOWN22 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-CHAN9YAN9-CVE-2023-22809
# CVE-2023-22809

Analisi & Exploit

# Informazioni di base

ID vulnerabilità: CVE-2023-22809

Livello di gravità: Alto

Punteggio: 7.8

Versioni interessate: sudo 1.8.0-sudo 1.9.12p1(sudo>=1.8.0 or sudo <=1.9.12p1)

Effetto dell'attacco: Escalation dei privilegi locale

# Tecnica di attacco

Modificare /etc/passwd cambiando root in un nome utente, vedere exp_passwd.sh

Modificare /etc/sudoers per consentire all'utente X di eseguire qualsiasi comando senza password, vedere exp_sudoers.sh