{
    "id": "CVE-2019-18634",
    "published": "2020-01-29 18:15:12",
    "last_modified": "2026-06-17 02:25:11",
    "cvss_score": "7.8",
    "cvss_severity": "HIGH",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-787",
    "description": "In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.",
    "epss_score": "0.19426",
    "epss_percentile": "0.97284",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-30 18:17:22",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "debian",
            "product": "debian_linux"
        },
        {
            "vendor": "sudo_project",
            "product": "sudo"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "48052",
            "title": "Sudo 1.8.25p - 'pwfeedback' Buffer Overflow",
            "date": "2020-02-06",
            "url": "https://www.exploit-db.com/exploits/48052"
        },
        {
            "source": "exploit-db",
            "ref_id": "47995",
            "title": "Sudo 1.8.25p - 'pwfeedback' Buffer Overflow (PoC)",
            "date": "2020-02-04",
            "url": "https://www.exploit-db.com/exploits/47995"
        }
    ],
    "refs_list": [
        "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00029.html",
        "http://packetstormsecurity.com/files/156174/Slackware-Security-Advisory-sudo-Updates.html",
        "http://packetstormsecurity.com/files/156189/Sudo-1.8.25p-Buffer-Overflow.html",
        "http://seclists.org/fulldisclosure/2020/Jan/40",
        "http://www.openwall.com/lists/oss-security/2020/01/30/6",
        "http://www.openwall.com/lists/oss-security/2020/01/31/1",
        "http://www.openwall.com/lists/oss-security/2020/02/05/2",
        "http://www.openwall.com/lists/oss-security/2020/02/05/5",
        "https://access.redhat.com/errata/RHSA-2020:0487",
        "https://access.redhat.com/errata/RHSA-2020:0509",
        "https://access.redhat.com/errata/RHSA-2020:0540",
        "https://access.redhat.com/errata/RHSA-2020:0726",
        "https://lists.debian.org/debian-lts-announce/2020/02/msg00002.html",
        "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/",
        "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/",
        "https://seclists.org/bugtraq/2020/Feb/2",
        "https://seclists.org/bugtraq/2020/Feb/3",
        "https://seclists.org/bugtraq/2020/Jan/44",
        "https://security.gentoo.org/glsa/202003-12",
        "https://security.netapp.com/advisory/ntap-20200210-0001/",
        "https://support.apple.com/kb/HT210919",
        "https://usn.ubuntu.com/4263-1/",
        "https://usn.ubuntu.com/4263-2/",
        "https://www.debian.org/security/2020/dsa-4614",
        "https://www.sudo.ws/alerts/pwfeedback.html"
    ]
}