CVE-2023-27320 (HIGH 7.2) · Watchpost

← All vulnerabilities

CVE-2023-27320

HIGH 7.2CVE-2023-27320 · Published 28/02/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
sudo sudo_project	`= 1.9.13≥ 1.9.8, < 1.9.13`	`1.9.13`

Description

Sudo before 1.9.13p2 has a double free in the per-command chroot feature.

References

openwall.com/lists/oss-security/2023/03/01/8 · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/332KN4QI6QXB7NI7SWSJ2EQJKWIILFN6
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPLXMRAMXC3BYL4DNKVTK3V6JDMUXZ7B
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6VW24YGXJYI4NZ5HZPQCF4MCE7766AU
security.gentoo.org/glsa/202309-12 · Third Party Advisory
security.netapp.com/advisory/ntap-20230413-0009 · Third Party Advisory
openwall.com/lists/oss-security/2023/02/28/1 · Exploit
sudo.ws/releases/stable · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free