sudo (SUSE:Enterprise Storage 7) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Enterprise Storage 7 package sudo, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-22809 — CVSS 7.8 (high): In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables…
• CVE-2022-43995 — CVSS 7.1 (high): Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can…
• CVE-2023-28486 — CVSS 5.3 (medium): Sudo before 1.9.13 does not escape control characters in log messages.
• CVE-2023-28487 — CVSS 5.3 (medium): Sudo before 1.9.13 does not escape control characters in sudoreplay output.