Total vulnerabilities in the database
The secure path feature in env.c in sudo 1.3.1 through 1.6.9p22 and 1.7.0 through 1.7.2p6 does not properly handle an environment that contains multiple PATH variables, which might allow local users to gain privileges via a crafted value of the last PATH variable.
| Software | From | Fixed in |
|---|---|---|
| todd_miller / sudo | 1.6.3p1 | 1.6.3p1.x |
| todd_miller / sudo | 1.6.9p1 | 1.6.9p1.x |
| todd_miller / sudo | 1.6.8p1 | 1.6.8p1.x |
| todd_miller / sudo | 1.6.3p3 | 1.6.3p3.x |
| todd_miller / sudo | 1.3.1 | 1.3.1.x |
| todd_miller / sudo | 1.7.2p4 | 1.7.2p4.x |
| todd_miller / sudo | 1.6.6 | 1.6.6.x |
| todd_miller / sudo | 1.6.3p2 | 1.6.3p2.x |
| todd_miller / sudo | 1.6.9p14 | 1.6.9p14.x |
| todd_miller / sudo | 1.6.9p17 | 1.6.9p17.x |
| todd_miller / sudo | 1.7.0 | 1.7.0.x |
| todd_miller / sudo | 1.6.8p5 | 1.6.8p5.x |
| todd_miller / sudo | 1.6.7p3 | 1.6.7p3.x |
| todd_miller / sudo | 1.6.8p8 | 1.6.8p8.x |
| todd_miller / sudo | 1.6.3 | 1.6.3.x |
| todd_miller / sudo | 1.6.8p2 | 1.6.8p2.x |
| todd_miller / sudo | 1.6.1 | 1.6.1.x |
| todd_miller / sudo | 1.6.9p15 | 1.6.9p15.x |
| todd_miller / sudo | 1.6.7p1 | 1.6.7p1.x |
| todd_miller / sudo | 1.6.9p20 | 1.6.9p20.x |
| todd_miller / sudo | 1.7.1 | 1.7.1.x |
| todd_miller / sudo | 1.7.2p2 | 1.7.2p2.x |
| todd_miller / sudo | 1.7.2p7 | 1.7.2p7.x |
| todd_miller / sudo | 1.7.2 | 1.7.2.x |
| todd_miller / sudo | 1.6.8p6 | 1.6.8p6.x |
| todd_miller / sudo | 1.6.2 | 1.6.2.x |
| todd_miller / sudo | 1.6.9p22 | 1.6.9p22.x |
| todd_miller / sudo | 1.6.9p6 | 1.6.9p6.x |
| todd_miller / sudo | 1.6.8 | 1.6.8.x |
| todd_miller / sudo | 1.6.9p7 | 1.6.9p7.x |
| todd_miller / sudo | 1.6.9p9 | 1.6.9p9.x |
| todd_miller / sudo | 1.6.9p8 | 1.6.9p8.x |
| todd_miller / sudo | 1.6.8p10 | 1.6.8p10.x |
| todd_miller / sudo | 1.6.4p1 | 1.6.4p1.x |
| todd_miller / sudo | 1.6.8p3 | 1.6.8p3.x |
| todd_miller / sudo | 1.6.5p2 | 1.6.5p2.x |
| todd_miller / sudo | 1.6.2p1 | 1.6.2p1.x |
| todd_miller / sudo | 1.6.9p10 | 1.6.9p10.x |
| todd_miller / sudo | 1.6.5 | 1.6.5.x |
| todd_miller / sudo | 1.7.2p1 | 1.7.2p1.x |
| todd_miller / sudo | 1.6.2p2 | 1.6.2p2.x |
| todd_miller / sudo | 1.6.9 | 1.6.9.x |
| todd_miller / sudo | 1.7.2p3 | 1.7.2p3.x |
| todd_miller / sudo | 1.6.9p4 | 1.6.9p4.x |
| todd_miller / sudo | 1.6.7p2 | 1.6.7p2.x |
| todd_miller / sudo | 1.6.9p19 | 1.6.9p19.x |
| todd_miller / sudo | 1.6.3p4 | 1.6.3p4.x |
| todd_miller / sudo | 1.6.3p6 | 1.6.3p6.x |
| todd_miller / sudo | 1.6.3p7 | 1.6.3p7.x |
| todd_miller / sudo | 1.6.9p18 | 1.6.9p18.x |
| todd_miller / sudo | 1.6.9p12 | 1.6.9p12.x |
| todd_miller / sudo | 1.6.7p4 | 1.6.7p4.x |
| todd_miller / sudo | 1.6.7p5 | 1.6.7p5.x |
| todd_miller / sudo | 1.6.9p13 | 1.6.9p13.x |
| todd_miller / sudo | 1.6 | 1.6.x |
| todd_miller / sudo | 1.6.4 | 1.6.4.x |
| todd_miller / sudo | 1.6.8p7 | 1.6.8p7.x |
| todd_miller / sudo | 1.6.8p11 | 1.6.8p11.x |
| todd_miller / sudo | 1.6.9p3 | 1.6.9p3.x |
| todd_miller / sudo | 1.6.9p21 | 1.6.9p21.x |
| todd_miller / sudo | 1.6.7 | 1.6.7.x |
| todd_miller / sudo | 1.6.8p9 | 1.6.8p9.x |
| todd_miller / sudo | 1.6.3p5 | 1.6.3p5.x |
| todd_miller / sudo | 1.6.9p5 | 1.6.9p5.x |
| todd_miller / sudo | 1.6.9p2 | 1.6.9p2.x |
| todd_miller / sudo | 1.7.2p5 | 1.7.2p5.x |
| todd_miller / sudo | 1.6.8p12 | 1.6.8p12.x |
| todd_miller / sudo | 1.6.4p2 | 1.6.4p2.x |
| todd_miller / sudo | 1.6.5p1 | 1.6.5p1.x |
| todd_miller / sudo | 1.6.9p16 | 1.6.9p16.x |
| todd_miller / sudo | 1.6.8p4 | 1.6.8p4.x |
| todd_miller / sudo | 1.7.2p6 | 1.7.2p6.x |
| todd_miller / sudo | 1.6.9p11 | 1.6.9p11.x |
| todd_miller / sudo | 1.6.2p3 | 1.6.2p3.x |