https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:58:16 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:10758 <p><strong>Affected:</strong> AlmaLinux:10: sudo, AlmaLinux:10: sudo-python-plugin</p> <p>The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.</p> <p>Security Fix(es):</p> <p>* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: sudo, AlmaLinux:10: sudo-python-plugin</p> <p>The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.</p> <p>Security Fix(es):</p> <p>* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:10758 https://cve.radiocsirt.org/vuln/bdu:2026-04709 bdu:2026-04709 https://cve.radiocsirt.org/vuln/bdu:2026-04709 https://cve.radiocsirt.org/vuln/bell-cve-2026-35535 <p><strong>Affected:</strong> Alpaquita:23: sudo, Alpaquita:25: sudo, Alpaquita:stream: sudo</p> <p><strong>Affected:</strong> Alpaquita:23: sudo, Alpaquita:25: sudo, Alpaquita:stream: sudo</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-35535 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0428 certfr-2026-avi-0428 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0428 https://cve.radiocsirt.org/vuln/euvd-2026-362264 EUVD-2026-362264 https://cve.radiocsirt.org/vuln/euvd-2026-362264 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35535 <p>In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.</p> <p>In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35535 https://cve.radiocsirt.org/vuln/ghsa-g5fc-f834-rcr2 <p>In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.</p> <p>In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-g5fc-f834-rcr2 https://cve.radiocsirt.org/vuln/icsa-26-188-05 <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> https://cve.radiocsirt.org/vuln/icsa-26-188-05 https://cve.radiocsirt.org/vuln/msrc_cve-2026-35535 msrc_CVE-2026-35535 https://cve.radiocsirt.org/vuln/msrc_cve-2026-35535 https://cve.radiocsirt.org/vuln/oesa-2026-1908 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: sudo</p> <p>Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fix(es):</p> <p>In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.(CVE-2026-35535)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: sudo</p> <p>Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fix(es):</p> <p>In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.(CVE-2026-35535)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1908 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10510-1 <p>sudo-1.9.17p2-2.1 on GA media</p> <p>sudo-1.9.17p2-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10510-1 https://cve.radiocsirt.org/vuln/rhsa-2026:13731 <p>sudo: Sudo: Privilege escalation due to failure in privilege drop calls</p> <p>sudo: Sudo: Privilege escalation due to failure in privilege drop calls</p> https://cve.radiocsirt.org/vuln/rhsa-2026:13731 https://cve.radiocsirt.org/vuln/ssa-253495 <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> <p>A vulnerability has been found in GNU elfutils 0.192 and classified as critical. This vulnerability affects the function __libdw_thread_tail in the library libdw_alloc.c of the component eu-readelf. The manipulation of the argument w leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 2636426a091bd6c6f7f02e49ab20d4cdc6bfc753. It is recommended to apply a patch to fix this issue. A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is b16f441cca0a4841050e3215a9f120a6d8aea918. It is recommended to apply a patch to fix this issue. A flaw was found in how GLib’s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn’t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corrup…</p> https://cve.radiocsirt.org/vuln/ssa-253495 https://cve.radiocsirt.org/vuln/suse-su-2026:1308-1 <p>Security update for sudo</p> <p>Security update for sudo</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1308-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35535 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: sudo, Ubuntu:24.04:LTS: sudo, Ubuntu:25.10: sudo</p> <p>In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: sudo, Ubuntu:24.04:LTS: sudo, Ubuntu:25.10: sudo</p> <p>In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35535 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0971 <p>Ein lokaler Angreifer kann eine Schwachstelle in sudo ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in sudo ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0971