Plazmaz/CVE-2019-18634

PoC

A functional exploit for CVE-2019-18634, a BSS overflow in sudo's pwfeedback feature that allows for for privesc

view exploit source poc_in_githubauthor Plazmazpublished 2020-02-07catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2019-18634US	high7.8	19.3% (97th)	Exploit	2020-01-29
In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.