UpHeron
All vulnerabilities

Servers and applications

CVE-2019-18634

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of…

Severity
High 7.8
Published
29 Jan 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.8.26
Exploit chance
19% in the next 30 daysHigher than 97% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
sudoServers and applications · cpe:a:sudo_project:sudo
  • From 1.7.1 before 1.8.26

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-18634
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-18634