- Vendor / Project
- Sudo
- Product
- Sudo
- Date added
- Apr 6, 2022
- Due date
- Apr 27, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-122, CWE-193
Description
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
Required action
Apply updates per vendor instructions.