AZL-11400
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-11400.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-11400
- Upstream
- Published
- 2022-11-02T14:15:16Z
- Modified
- 2026-04-01T05:06:59.114160Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- CVE-2022-43995 affecting package sudo for versions less than 1.9.12p1-1
- Details
-
Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.
- References