Vulnerabilities > Sudo

DATE CVE VULNERABILITY TITLE RISK
2019-12-19 CVE-2019-19234 Unspecified vulnerability in Sudo
In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead of a password hash) is not considered, allowing an attacker (who has access to a Runas ALL sudoer account) to impersonate any blocked user.
network
low complexity
sudo
7.5
2019-12-19 CVE-2019-19232 Unspecified vulnerability in Sudo
In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user.
network
low complexity
sudo
7.5