CyberRota Analysis
AI-GeneratedSudo versions up to 1.9.17p2 are vulnerable due to inadequate policy checks on the execveat system call in ptrace-based intercept mode, allowing users with specific command permissions to execute unauthorized programs. This vulnerability can lead to significant security breaches as it bypasses both policy enforcement and logging mechanisms. Organizations using affected versions of Sudo should prioritize remediation to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging.