https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T03:50:45.560289+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-22809 CVE-2023-22809 2026-10-07T03:50:45.563340+00:00

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected versions are 1.8.0 through 1.9.12.p1. The problem exists because a user-specified editor may contain a "--" argument that defeats a protection mechanism, e.g., an EDITOR='vim -- /path/to/extra/file' value.

 https://vulnerability.circl.lu/vuln/usn-5811-1 USN-5811-1 — sudo vulnerabilities 2026-10-07T03:50:45.563409+00:00

Affected: Ubuntu:18.04:LTS: sudo, Ubuntu:20.04:LTS: sudo, Ubuntu:22.04:LTS: sudo

Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoedit command. A local attacker that has permission to use the sudoedit command could possibly use this issue to edit arbitrary files. (CVE-2023-22809)

It was discovered that the Protobuf-c library, used by Sudo, incorrectly handled certain arithmetic shifts. An attacker could possibly use this issue to cause Sudo to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-33070)