Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via sudoedit -s and a command-line argument that ends with a single backslash character.
A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sudo | Sudo_project | 1.8.2 (including) | 1.8.32 (excluding) |
| Sudo | Sudo_project | 1.9.0 (including) | 1.9.5 (excluding) |
| Sudo | Sudo_project | 1.9.5 (including) | 1.9.5 (including) |
| Sudo | Sudo_project | 1.9.5-patch1 (including) | 1.9.5-patch1 (including) |