CVE-2022-43995: High severity Sudo Project Sudo vulnerability
Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the compiler and processor architecture.
Other sources
Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer. The impact could vary depending on the system libraries, compiler, and processor architecture.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/sudoto a version that resolves this vulnerability.Fixed in 1.9.12-r1 - Upgrade
Upgrade
debian/sudoto a version that resolves this vulnerability.Fixed in 1.9.12p1-1 - Upgrade
Upgrade
debian/sudoto a version that resolves this vulnerability.Fixed in 1.9.13p3-1+deb12u4Fixed in 1.9.13p3-1+deb12u2Fixed in 1.9.16p2-3+deb13u2Fixed in 1.9.17p2-9Fixed in 1.9.17p2-11
Event History
Frequently Asked Questions
What is CVE-2022-43995?
CVE-2022-43995 is a vulnerability in Sudo 1.8.0 through 1.9.12 with the crypt() password backend that can result in a heap-based buffer over-read.
How severe is CVE-2022-43995?
CVE-2022-43995 has a severity rating of 7.1, which is considered high.
Which software versions are affected by CVE-2022-43995?
Versions 1.8.0 through 1.9.12 of the Sudo software are affected by CVE-2022-43995.
How can CVE-2022-43995 be exploited?
CVE-2022-43995 can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer.
Are there any references for CVE-2022-43995?
Yes, you can find more information about CVE-2022-43995 at the following references: [Link 1](https://bugzilla.redhat.com/show_bug.cgi?id=2140224), [Link 2](https://bugzilla.redhat.com/show_bug.cgi?id=2139911), [Link 3](https://github.com/sudo-project/sudo/commit/bd209b9f16fcd1270c13db27ae3329c677d48050).