7.8

CVE-2019-18634: debian debian_linux Out-of-bounds Write

CVSS: 7.8v3.1HighModified
AliasesALPINE-CVE-2019-18634MGASA-2020-0081SUSE-SU-2020:0390-1
Published 29-01-2020Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2019-18634 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 19.28% chance of exploitation in the next 30 days, higher than 97.3% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk
45/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
19.28%
0%100%
Medium · -0.15 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits4reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2024:11413-1

Timeline

  1. 29-01-2020
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

CVSS metrics

6 scores · 5 sources · 2 versions

EPSS trend

Probability

19.28%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

-0.15 pp

From 19.43% on 18-09-2026

18-09-202618-10-2026
EPSS score
19.28%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found
  • referenceUnverified

    Exploit Reference (sudo.ws)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (openwall.com)

    Maturity: unknown

  • exploit-databasedoslinuxUnverified

    Sudo 1.8.25p - 'pwfeedback' Buffer Overflow (PoC)

    Maturity: poc

Show all 4 exploits
  • exploit-databaselocallinuxUnverified

    Sudo 1.8.25p - 'pwfeedback' Buffer Overflow

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Suse26 products
  • sudo&distro=HPE Helion OpenStack 8< 1.8.20p2-3.17.1
  • sudo&distro=SUSE Enterprise Storage 5< 1.8.20p2-3.17.1
  • sudo&distro=SUSE Linux Enterprise Desktop 12 SP4< 1.8.20p2-3.17.1
  • sudo&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 1.8.22-4.9.1
  • sudo&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 1.8.22-4.9.1
Redhat4 products
  • sudo< 0:1.8.25p1-8.el8_1.1 | < 0:1.8.25p1-4.el8_0.3 | < 0:1.8.23-4.el7_7.2 | < 0:1.8.6p3-29.el6_10.3
  • sudo-debuginfo< 0:1.8.25p1-8.el8_1.1 | < 0:1.8.25p1-4.el8_0.3 | < 0:1.8.23-4.el7_7.2 | < 0:1.8.6p3-29.el6_10.3
  • sudo-debugsource< 0:1.8.25p1-8.el8_1.1 | < 0:1.8.25p1-4.el8_0.3
  • sudo-devel< 0:1.8.23-4.el7_7.2 | < 0:1.8.6p3-29.el6_10.3
Debian2 products
  • sudo< 1.8.31-1 | < 1.8.19p1-2.1+deb9u2 | < 1.8.10p3-1+deb8u7
  • debian_linuxEOL8.0 | 9.0 | 10.0
Alpine1 product
  • sudo≥ 1.7.1, < 1.8.27-r2 | ≥ 1.7.1, < 1.8.29-r2 | ≥ 1.7.1, < 1.8.31-r0 | ≥ 1.7.1, < 1.8.23-r4 | ≥ 1.7.1, < 1.8.25_p1-r3
Mageia1 product
  • sudo< 1.8.28-1.1.mga7
Opensuse1 product
  • sudo&distro=openSUSE Leap 15.1< 1.8.22-lp151.5.6.1
Sudo_project1 product
  • sudo≥ 1.7.1, < 1.8.26
Ubuntu1 product
  • sudo< 1.8.16-0ubuntu1.9 | < 1.8.21p2-3ubuntu1.2 | < 1.8.9p5-1ubuntu1.5+esm3

8 vendors · 37 products

References

54 links
Show all 54 references