todd miller sudo

Name: todd miller sudo
Brand: todd miller

productUS

cpe:2.3:a:todd_miller:sudo:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical9high16medium4low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-1775US	medium6.9	3.18% (88th)	Exploit	no fix	2013-03-05	79 versions
CVE-2012-0809US	high7.2	2.93% (87th)	Exploit	no fix	2012-02-01	7 versions
CVE-2004-1689US	low2.1	1.17% (67th)	Exploit	no fix	2004-09-16	= 1.6.8
CVE-2010-0426US	medium6.9	1.08% (65th)	Exploit	no fix	2010-02-24	32 versions
CVE-2005-4158US	medium4.6	1.08% (65th)	Exploit	no fix	2005-12-11	30 versions
CVE-2002-0043US	high7.2	0.93% (60th)	Exploit	no fix	2002-01-31	11 versions
CVE-2007-4305US	medium6.2	0.86% (58th)	Exploit	no fix	2007-08-13	43 versions
CVE-2004-1051US	high7.2	1.37% (72nd)	—	no fix	2005-03-01	25 versions
CVE-2005-2959US	medium4.6	0.62% (50th)	—	no fix	2005-10-25	32 versions
CVE-2006-0151US	high7.2	0.61% (49th)	—	no fix	2006-01-09	32 versions
CVE-1999-1496US	low2.1	0.51% (43rd)	—	no fix	1999-06-08	= 1.5
CVE-2011-0010US	medium4.4	0.50% (42nd)	—	no fix	2011-01-18	16 versions
CVE-2010-0427US	medium4.4	0.46% (40th)	—	no fix	2010-02-25	28 versions
CVE-2010-1646US	medium6.2	0.46% (39th)	—	no fix	2010-06-07	74 versions
CVE-2012-3440US	medium5.6	0.43% (38th)	—	no fix	2012-08-08	= 1.7.2
CVE-1999-0958US	high7.2	0.43% (37th)	—	no fix	1998-01-12	3 versions
CVE-2005-1831US	high7.2	0.40% (35th)	—	no fix	2005-05-31	= 1.6.8p7
CVE-2010-1163US	medium6.9	0.40% (34th)	—	no fix	2010-04-16	21 versions
CVE-2012-2337US	high7.2	0.40% (34th)	—	no fix	2012-05-18	19 versions
CVE-2005-1993US	low3.7	0.40% (34th)	—	no fix	2005-06-20	29 versions
CVE-2013-1776US	medium4.4	0.37% (31st)	—	no fix	2013-04-08	64 versions
CVE-2013-2776US	medium4.4	0.37% (31st)	—	no fix	2013-04-08	64 versions
CVE-2013-2777US	medium4.4	0.36% (30th)	—	no fix	2013-04-08	74 versions
CVE-2007-3149US	high7.2	0.36% (30th)	—	no fix	2007-06-11	= 1.6.8_p12
CVE-2010-2956US	medium6.2	0.36% (30th)	—	no fix	2010-09-10	15 versions
CVE-2005-1119US	low2.1	0.36% (29th)	—	no fix	2005-05-02	27 versions
CVE-2014-0106US	medium6.6	0.34% (27th)	—	no fix	2014-03-11	58 versions
CVE-2016-7032US	high7.0	0.34% (27th)	—	no fix	2017-04-14	28 versions
CVE-2011-0008US	medium6.9	0.33% (26th)	—	no fix	2011-01-20	114 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-26414 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-284Improper Access Control3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-134Use of Externally-Controlled Format String1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan