Format string vulnerability in the sudo_debug function in... · CVE-2012-0809 · GitHub Advisory Database · GitHub

Format string vulnerability in the sudo_debug function in...

High severity Unreviewed Published May 14, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.

References

Published by the National Vulnerability Database

Feb 1, 2012

Published to the GitHub Advisory Database May 14, 2022

Last updated Feb 3, 2023