VDB
CVE-2012-0809
CVE-2012-0809
PUBLISHED
CVSS 7.199999809265137 HIGH
Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.
EPSS 2.92% · 86.5th percentile
Risk Scores
CVSS 2.0
7.199999809265137
EPSS Score
2.92%
86.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| todd_miller | sudo | 1.8.1, 1.8.1p1, 1.8.1p2 |
| n/a | n/a | n/a |
Timeline
- Feb 1, 2012 CVE Published
- May 1, 2013 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Jul 17, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 4, 2023 EPSS Score
- Jul 19, 2023 EPSS Score
- Sep 10, 2023 EPSS Score