Skip to content
OpenAdvisories
Low WID-SEC-2025-1043 2 CVEs

sudo-rs: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published May 13, 2025 · Updated May 13, 2025 · de-DE

Vendor: Fedora Product: Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in sudo-rs ausnutzen, um Informationen offenzulegen.

Product

sudo-rs ist eine in Rust geschriebene Neuimplementierung des traditionellen sudo-Tools.

Vulnerabilities 2

  • Low 3.3
    CVE-2025-46717

    sudo-rs Allows Low Privilege Users to Discover the Existence of Files in Inaccessible Folders

    sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with no (or very limited) sudo privileges can determine whether files exists in folders that they otherwise cannot access using `sudo --list <pathname>`. Use…

    trifectatechfoundation sudo-rs sudo-rs rust-sudo-rs Debian Ubuntu crates.io
  • Low 3.3
    CVE-2025-46718

    sudo-rs Allows Low Privilege Users to Enumerate Privileges of Others

    sudo-rs is a memory safe implementation of sudo and su written in Rust. Prior to version 0.2.6, users with limited sudo privileges (e.g. execution of a single command) can list sudo privileges of other users using the `-U` flag. This vulnerability allows user…

    trifectatechfoundation sudo-rs sudo-rs rust-sudo-rs Debian Ubuntu crates.io

Revision history

  1. #1

    Initiale Fassung

References