Vulnerabilities > Sudo
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2019-12-19 | CVE-2019-19234 | Unspecified vulnerability in Sudo In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead of a password hash) is not considered, allowing an attacker (who has access to a Runas ALL sudoer account) to impersonate any blocked user. | 7.5 |
2019-12-19 | CVE-2019-19232 | Unspecified vulnerability in Sudo In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. | 7.5 |