CVE-2023-42465: sudo · CVE-2023-42465 is a
Affects sudoSource CVE Database V5
Not known to be exploited : upgrade to 1.9.15 soon.
Data as of 26 Oct 2026, 11:42 UTC
Rated High by the CNA (mitre) · No CVSS score from NVD or the CNA
- EPSS
- 0.5% chance of exploitation in 30 days – higher than 45% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 1.9.15
Exploitation evidence
Disclosed: evidence found.
CVE published 22 Dec 2023
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade the to 1.9.15.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Debiandebian/sudopkg:deb/debian/sudoOther threats | Affected
| Fixed in
|
Fedorafedora/sudopkg:rpm/fedora/sudoOther threats | Affected
| Fixed in
|
Red Hatredhat/sudopkg:rpm/redhat/sudoOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A fix for this vulnerability is available in sudo version 1.9.15. Users and administrators should upgrade to version 1.9.15 or later to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.
Description
CVE-2023-42465 is a vulnerability in sudo versions prior to 1.9.15 that may allow row hammer attacks leading to authentication bypass or privilege escalation. The issue arises because the application logic relies on checking for non-equality to an error value rather than equality to a success value, combined with values that are susceptible to single-bit flips. This flaw was fixed in sudo version 1.9.15.
References
- sudo.ws/releases/changelog/ (opens in a new tab)
- openwall.com/lists/oss-security/2023/12/21/9 (opens in a new tab)
- github.com/sudo-project/sudo/commit/7873f8334c8d31031f8cfa83bd97ac6029309e4f (opens in a new tab)
- arxiv.org/abs/2309.02545 (opens in a new tab)
- github.com/sudo-project/sudo/releases/tag/SUDO_1_9_15 (opens in a new tab)
- security.gentoo.org/glsa/202401-29 (opens in a new tab)
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6XMRUJCPII4MPWG43HTYR76DGLEYEFZ/ (opens in a new tab)
- security.netapp.com/advisory/ntap-20240208-0002/ (opens in a new tab)
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R4Q23NHCKCLFIHSNY6KJ27GM7FSCEVXM/ (opens in a new tab)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R4Q23NHCKCLFIHSNY6KJ27GM7FSCEVXM/ (opens in a new tab)
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6XMRUJCPII4MPWG43HTYR76DGLEYEFZ/ (opens in a new tab)
- openwall.com/lists/oss-security/2025/09/23/2 (opens in a new tab)
- openwall.com/lists/oss-security/2025/09/24/6 (opens in a new tab)