CVE-2023-28486 (MEDIUM 5.3) · Watchpost

← All vulnerabilities

CVE-2023-28486

MEDIUM 5.3CVE-2023-28486 · Published 16/03/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
sudo sudo_project	`< 1.9.13`	`1.9.13`

Description

Sudo before 1.9.13 does not escape control characters in log messages.

References

sudo-project/sudo commit 334daf9 · Patch
sudo-project/sudo release SUDO_1_9_13 · Release Notes
lists.debian.org/debian-lts-announce/2024/02/msg00002.html
security.gentoo.org/glsa/202309-12 · Third Party Advisory
security.netapp.com/advisory/ntap-20230420-0002 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free