nvd-json-data-feeds/CVE-2023/CVE-2023-424xx/CVE-2023-42465.json

{
  "id": "CVE-2023-42465",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2023-12-22T16:15:08.057",
  "lastModified": "2023-12-22T20:32:41.017",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://arxiv.org/abs/2309.02545",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/sudo-project/sudo/commit/7873f8334c8d31031f8cfa83bd97ac6029309e4f",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_15",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.openwall.com/lists/oss-security/2023/12/21/9",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.sudo.ws/releases/changelog/",
      "source": "cve@mitre.org"
    }
  ]
}