6.6

CVE-2014-0106

Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions via a crafted environment variable.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ macOS X Version <= 10.10.4
Todd Miller ≫ Sudo Version1.6.9
Todd Miller ≫ Sudo Version1.6.9p20
Todd Miller ≫ Sudo Version1.6.9p21
Todd Miller ≫ Sudo Version1.6.9p22
Todd Miller ≫ Sudo Version1.6.9p23
Todd Miller ≫ Sudo Version1.7.0
Todd Miller ≫ Sudo Version1.7.1
Todd Miller ≫ Sudo Version1.7.2
Todd Miller ≫ Sudo Version1.7.2p1
Todd Miller ≫ Sudo Version1.7.2p2
Todd Miller ≫ Sudo Version1.7.2p3
Todd Miller ≫ Sudo Version1.7.2p4
Todd Miller ≫ Sudo Version1.7.2p5
Todd Miller ≫ Sudo Version1.7.2p6
Todd Miller ≫ Sudo Version1.7.2p7
Todd Miller ≫ Sudo Version1.7.3b1
Todd Miller ≫ Sudo Version1.7.4
Todd Miller ≫ Sudo Version1.7.4p1
Todd Miller ≫ Sudo Version1.7.4p2
Todd Miller ≫ Sudo Version1.7.4p3
Todd Miller ≫ Sudo Version1.7.4p4
Todd Miller ≫ Sudo Version1.7.4p5
Todd Miller ≫ Sudo Version1.7.4p6
Todd Miller ≫ Sudo Version1.7.5
Todd Miller ≫ Sudo Version1.7.6
Todd Miller ≫ Sudo Version1.7.6p1
Todd Miller ≫ Sudo Version1.7.6p2
Todd Miller ≫ Sudo Version1.7.7
Todd Miller ≫ Sudo Version1.7.8
Todd Miller ≫ Sudo Version1.7.8p1
Todd Miller ≫ Sudo Version1.7.8p2
Todd Miller ≫ Sudo Version1.7.9
Todd Miller ≫ Sudo Version1.7.9p1
Todd Miller ≫ Sudo Version1.7.10
Todd Miller ≫ Sudo Version1.7.10p1
Todd Miller ≫ Sudo Version1.7.10p2
Todd Miller ≫ Sudo Version1.7.10p3
Todd Miller ≫ Sudo Version1.7.10p4
Todd Miller ≫ Sudo Version1.7.10p5
Todd Miller ≫ Sudo Version1.7.10p6
Todd Miller ≫ Sudo Version1.7.10p7
Todd Miller ≫ Sudo Version1.7.10p8
Todd Miller ≫ Sudo Version1.7.10p9
Todd Miller ≫ Sudo Version1.7.10p10
Todd Miller ≫ Sudo Version1.8.0
Todd Miller ≫ Sudo Version1.8.1
Todd Miller ≫ Sudo Version1.8.1p1
Todd Miller ≫ Sudo Version1.8.1p2
Todd Miller ≫ Sudo Version1.8.2
Todd Miller ≫ Sudo Version1.8.3
Todd Miller ≫ Sudo Version1.8.3p1
Todd Miller ≫ Sudo Version1.8.3p2
Todd Miller ≫ Sudo Version1.8.4
Todd Miller ≫ Sudo Version1.8.4p1
Todd Miller ≫ Sudo Version1.8.4p2
Todd Miller ≫ Sudo Version1.8.4p3
Todd Miller ≫ Sudo Version1.8.4p4
Todd Miller ≫ Sudo Version1.8.4p5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.211
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.6 2.7 10
AV:L/AC:M/Au:S/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.