Sploitus

47 exploited vulnerabilities in Sudo

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Linux Mint, Red Os, Sudo, Suse, Canonical
With known exploits
47
Affected Sudo Project Sudo versions
< 1.9.17, 1.8.28, 1.8.20, 1.9.12, 1.8.32, 1.9.5, 1.8.26, 1.7.4, 1.8.18, 1.9.13, 1.8.14, 1.6.6, 1.9.15, 1.8.29
Affected Canonical Authd versions
< 0.3.5
Affected Debian Shadow versions
≤ 4.1.5
Affected Gitlab versions
< 18.2.7, 18.3.3, 18.4.0
Affected Antixlinux Antix Linux versions
All versions
Affected Mxlinux Mx Linux versions
All versions
Affected Todd Miller Sudo versions
= 1.8.0, 1.8.1, 1.8.1p1, 1.8.1p2, 1.8.2, 1.8.3, 1.8.3p1, 1.6, 1.6.1, 1.6.2, 1.6.2p3, 1.6.3, 1.6.3_p7, 1.6.4, 1.6.4p2, 1.6.5, 1.6.6, 1.6.7, 1.6.7p5, 1.6.8, 1.6.8p12, 1.6.9, 1.6.9p20, 1.6.9p21, 1.6.9p22, 1.6.9p23, 1.6.8_p12, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.6.3_p1, 1.6.3_p2, 1.6.3_p3, 1.6.3_p4, 1.6.3_p5, 1.6.3_p6, 1.6.4_p1, 1.6.4_p2, 1.6.5_p1, 1.6.5_p2, 1.6.7_p5, 1.6.8_p1, 1.6.8_p2, 1.6.8_p5, 1.6.8_p7, 1.6.8_p8, 1.6.8_p9, 1.6.8p7, 1.6.9_p17, 1.6.9_p18, 1.6.9_p19, 1.6.9_p20, 1.6.9_p21, 1.6.9_p22, 1.7.0, 1.7.1, 1.7.2p1, 1.7.2p2, 1.7.2p3, 1.7.2p4, 1.7.2, 1.3.1, 1.6.2p1, 1.6.2p2, 1.6.3p1, 1.6.3p2, 1.6.3p3, 1.6.3p4, 1.6.3p5, 1.6.3p6, 1.6.3p7, 1.6.4p1, 1.6.5p1, 1.6.5p2, 1.6.7p1, 1.6.7p2, 1.6.7p3, 1.6.7p4, 1.6.8p1, 1.6.8p2, 1.6.8p3, 1.6.8p4, 1.6.8p5, 1.6.8p6, 1.6.8p8, 1.6.8p9, 1.6.8p10, 1.6.8p11
Affected Mit Kerberos 5 versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 20 of these already have exploit code on Sploitus

CVE-2025-32463 70 exploits
CVSS 9.3 CRITICAL 2025-06-30FIX AVAILABLE
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project SudoExploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2024-9313
CVSS 9.0 HIGH 2024-10-03FIX AVAILABLE
CVE-2023-7090
CVSS 9.0 HIGH 2023-12-23
CVE-2019-14287 11 exploits
CVSS 9.0 HIGH 2019-10-14FIX AVAILABLE
Exploit for Improper Handling of Exceptional Conditions in Sudo_Project SudoExploit for Race Condition in Canonical Ubuntu_Linux
CVE-2025-32462 11 exploits
CVSS 8.8 HIGH 2025-06-30FIX AVAILABLE
Exploit for Incorrect Authorization in Sudo_Project Sudo📄 Sudo Chroot 1.9.17 Privilege Escalation
CVE-2017-1000368
CVSS 8.2 HIGH 2017-06-02
CVE-2026-35535
CVSS 7.8 HIGH 2026-03-12FIX AVAILABLE
CVE-2023-22809 19 exploits
CVSS 7.8 HIGH 2023-01-18FIX AVAILABLE
Exploit for Improper Privilege Management in Sudo_Project SudoExploit for Improper Privilege Management in Sudo_Project Sudo
CVE-2021-23240
CVSS 7.8 HIGH 2021-01-12FIX AVAILABLE
CVE-2021-23239
CVSS 7.8 HIGH 2021-01-06FIX AVAILABLE
CVE-2021-3156 80 exploits
CVSS 7.8 HIGH 2020-04-28FIX AVAILABLE
PoC_n_Dockerfile_4_PentestFinalProject_Group02Exploit for Off-by-one Error in Sudo_Project Sudo
CVE-2019-18634 14 exploits
CVSS 7.8 HIGH 2018-12-07FIX AVAILABLE
Exploit for Improper Handling of Exceptional Conditions in Sudo_Project SudoExploit for Race Condition in Canonical Ubuntu_Linux
CVE-2005-4890 1 exploit
CVSS 7.8 HIGH 2015-11-18FIX AVAILABLE
OpenSSH 6.8-6.9 pty issue Privilege Escalation Vulnerability
CVE-2016-7076
CVSS 7.8 HIGH 2016-11-17FIX AVAILABLE
CVE-2025-10871
CVSS 7.2 HIGH 2025-07-25
CVE-2023-27320
CVSS 7.2 HIGH 2023-02-27FIX AVAILABLE
CVE-2020-10587
CVSS 7.2 HIGH 2020-03-14FIX AVAILABLE
CVE-2015-5602 4 exploits
CVSS 7.2 HIGH 2010-02-26FIX AVAILABLE
Sudo <= 1.8.14 - Unauthorized PrivilegeSudo 1.8.14 - Unauthorized Privilege Vulnerability
CVE-2012-0809 5 exploits
CVSS 7.2 HIGH 2012-02-01FIX AVAILABLE
sudo 1.8.0-1.8.3p1 (sudo_debug) - Root Exploit + glibc FORTIFY_SOURCE BypassSudo v1.8.0-1.8.3p1 (sudo_debug) - Root Exploit
CVE-2012-2337
CVSS 7.2 HIGH 2012-05-18FIX AVAILABLE
CVE-2007-3149
CVSS 7.2 HIGH 2007-06-11
CVE-2006-0151
CVSS 7.2 HIGH 2006-01-09FIX AVAILABLE
CVE-2002-0184 1 exploit
CVSS 7.2 HIGH 2002-04-22FIX AVAILABLE
Sudo 1.6.x - Password Prompt Heap Overflow
CVE-2002-0043 1 exploit
CVSS 7.2 HIGH 2002-01-14
Sudo 1.6.3 - Unclean Environment Variable Privilege Escalation
CVE-2001-0279 1 exploit
CVSS 7.2 HIGH 2001-05-03FIX AVAILABLE
Sudo 1.5/1.6 - Heap Corruption
CVE-2022-43995
CVSS 7.1 HIGH 2022-10-28
CVE-2023-42465
CVSS 7.0 HIGH 2023-09-05FIX AVAILABLE
CVE-2019-18684
CVSS 7.0 HIGH 2019-11-04FIX AVAILABLE
CVE-2017-1000367 8 exploits
CVSS 6.9 MEDIUM 2017-05-30
Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation FrameworkSudo - get_process_ttyname() Privilege Escalation Vulnerability
CVE-2013-2777
CVSS 6.9 MEDIUM 2013-04-08FIX AVAILABLE
CVE-2013-1776
CVSS 6.9 MEDIUM 2013-04-08FIX AVAILABLE
CVE-2013-1775 8 exploits
CVSS 6.9 MEDIUM 2013-03-04FIX AVAILABLE
Mac OS X Sudo Password BypassMac OS X 10.8.4 Local Privilege Escalation
CVE-2010-1163 2 exploits
CVSS 6.9 MEDIUM 2010-04-16FIX AVAILABLE
Sudo 1.7.2p5 Local Privilege EscalationSudo sudoedit路径解析本地权限提升漏洞
CVE-2010-0427 1 exploit
CVSS 6.9 MEDIUM 2010-02-25FIX AVAILABLE
Todd Miller Sudo 'runas_default'本地特权提升漏洞
CVE-2010-0426 2 exploits
CVSS 6.9 MEDIUM 2010-02-24FIX AVAILABLE
Sudo 1.7.2p5 Local Privilege EscalationSudo sudoedit命令本地权限提升漏洞
CVE-2012-5536
CVSS 6.2 MEDIUM 2013-02-20FIX AVAILABLE
CVE-2010-1646
CVSS 6.2 MEDIUM 2010-06-07FIX AVAILABLE
CVE-2012-3440
CVSS 5.6 MEDIUM 2012-08-07FIX AVAILABLE
CVE-2023-28487
CVSS 5.3 MEDIUM 2023-01-18FIX AVAILABLE
CVE-2023-28486
CVSS 5.3 MEDIUM 2023-01-18FIX AVAILABLE
CVE-2005-4158 3 exploits
CVSS 4.6 MEDIUM 2005-12-11FIX AVAILABLE
Sudo 1.6.x - Environment Variable Handling Security Bypass (1)Sudo 1.6.x - Environment Variable Handling Security Bypass (2)
CVE-2005-2959 1 exploit
CVSS 4.6 MEDIUM 2005-10-25FIX AVAILABLE
sudo168p10.sh.txt
CVE-2013-2776
CVSS 4.4 MEDIUM 2013-04-08FIX AVAILABLE
CVE-2025-64170
CVSS 3.8 LOW 2025-11-10
CVE-2014-9680
CVSS 3.3 LOW 2014-12-31FIX AVAILABLE
CVE-2004-1689 1 exploit
CVSS 2.1 LOW 2004-09-16FIX AVAILABLE
SudoEdit 1.6.8 - Local Change Permission
CVE-1999-1496
CVSS 2.1 LOW 1999-06-08FIX AVAILABLE