Threats affecting pkg:rpm/fedora/sudo

CVE-2023-42465 is a vulnerability in sudo versions prior to 1.9.15 that may allow row hammer attacks leading to authentication bypass or privilege escalation. The issue arises because the application logic relies on checking for non-equality to an error value rather than equality to a success value, combined with values that are susceptible to single-bit flips. This flaw was fixed in sudo version 1.9.15.