Read the docs
TI-2013-01563 Aliases CVE-2013-1776GHSA-wjjf-2f85-8256

sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is…

Priority LOW 21CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.

Why it matters now

EPSS 0.00374 31st percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 65

CPEVersionsRoleVendor
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*up to 10.10.4VulnerableApple
cpe:2.3:a:todd_miller:sudo:1.8.0:*:*:*:*:*:*:*1.8.0VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.1:*:*:*:*:*:*:*1.8.1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.1p1:*:*:*:*:*:*:*1.8.1p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.1p2:*:*:*:*:*:*:*1.8.1p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.2:*:*:*:*:*:*:*1.8.2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.3:*:*:*:*:*:*:*1.8.3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.3p1:*:*:*:*:*:*:*1.8.3p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.3p2:*:*:*:*:*:*:*1.8.3p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.4:*:*:*:*:*:*:*1.8.4VulnerableTodd Miller
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions up to 10.10.4 Vulnerable ·Apple
  • cpe:2.3:a:todd_miller:sudo:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.1p1:*:*:*:*:*:*:* Versions 1.8.1p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.1p2:*:*:*:*:*:*:* Versions 1.8.1p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.3p1:*:*:*:*:*:*:* Versions 1.8.3p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.3p2:*:*:*:*:*:*:* Versions 1.8.3p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·Todd Miller
Show 55 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:todd_miller:sudo:1.8.4p1:*:*:*:*:*:*:*1.8.4p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.4p2:*:*:*:*:*:*:*1.8.4p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.4p3:*:*:*:*:*:*:*1.8.4p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.4p4:*:*:*:*:*:*:*1.8.4p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.4p5:*:*:*:*:*:*:*1.8.4p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.8.5:*:*:*:*:*:*:*1.8.5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.3.5:*:*:*:*:*:*:*1.3.5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*1.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*1.6.2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.2p3:*:*:*:*:*:*:*1.6.2p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*1.6.3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*1.6.3_p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:*1.6.4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:*1.6.4p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*1.6.5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*1.6.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*1.6.7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.7p5:*:*:*:*:*:*:*1.6.7p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*1.6.8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.8p12:*:*:*:*:*:*:*1.6.8p12VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:*1.6.9VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p20:*:*:*:*:*:*:*1.6.9p20VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p21:*:*:*:*:*:*:*1.6.9p21VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p22:*:*:*:*:*:*:*1.6.9p22VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.6.9p23:*:*:*:*:*:*:*1.6.9p23VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*1.7.0VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*1.7.1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*1.7.2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*1.7.2p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*1.7.2p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*1.7.2p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:*1.7.2p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:*1.7.2p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:*1.7.2p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:*1.7.2p7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.3b1:*:*:*:*:*:*:*1.7.3b1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.4:*:*:*:*:*:*:*1.7.4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.4p1:*:*:*:*:*:*:*1.7.4p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.4p2:*:*:*:*:*:*:*1.7.4p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.4p3:*:*:*:*:*:*:*1.7.4p3VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.4p4:*:*:*:*:*:*:*1.7.4p4VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.4p5:*:*:*:*:*:*:*1.7.4p5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.4p6:*:*:*:*:*:*:*1.7.4p6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.5:*:*:*:*:*:*:*1.7.5VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.6:*:*:*:*:*:*:*1.7.6VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.6p1:*:*:*:*:*:*:*1.7.6p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.6p2:*:*:*:*:*:*:*1.7.6p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.7:*:*:*:*:*:*:*1.7.7VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.8:*:*:*:*:*:*:*1.7.8VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.8p1:*:*:*:*:*:*:*1.7.8p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.8p2:*:*:*:*:*:*:*1.7.8p2VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.9:*:*:*:*:*:*:*1.7.9VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.9p1:*:*:*:*:*:*:*1.7.9p1VulnerableTodd Miller
cpe:2.3:a:todd_miller:sudo:1.7.10:*:*:*:*:*:*:*1.7.10VulnerableTodd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.4p1:*:*:*:*:*:*:* Versions 1.8.4p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.4p2:*:*:*:*:*:*:* Versions 1.8.4p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.4p3:*:*:*:*:*:*:* Versions 1.8.4p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.4p4:*:*:*:*:*:*:* Versions 1.8.4p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.4p5:*:*:*:*:*:*:* Versions 1.8.4p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.8.5:*:*:*:*:*:*:* Versions 1.8.5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.3.5:*:*:*:*:*:*:* Versions 1.3.5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.2p3:*:*:*:*:*:*:* Versions 1.6.2p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:* Versions 1.6.3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:* Versions 1.6.3_p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:* Versions 1.6.4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:* Versions 1.6.4p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:* Versions 1.6.7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.7p5:*:*:*:*:*:*:* Versions 1.6.7p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:* Versions 1.6.8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.8p12:*:*:*:*:*:*:* Versions 1.6.8p12 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:* Versions 1.6.9 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p20:*:*:*:*:*:*:* Versions 1.6.9p20 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p21:*:*:*:*:*:*:* Versions 1.6.9p21 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p22:*:*:*:*:*:*:* Versions 1.6.9p22 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.6.9p23:*:*:*:*:*:*:* Versions 1.6.9p23 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:* Versions 1.7.1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:* Versions 1.7.2p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:* Versions 1.7.2p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:* Versions 1.7.2p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:* Versions 1.7.2p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:* Versions 1.7.2p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:* Versions 1.7.2p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:* Versions 1.7.2p7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.3b1:*:*:*:*:*:*:* Versions 1.7.3b1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.4:*:*:*:*:*:*:* Versions 1.7.4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.4p1:*:*:*:*:*:*:* Versions 1.7.4p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.4p2:*:*:*:*:*:*:* Versions 1.7.4p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.4p3:*:*:*:*:*:*:* Versions 1.7.4p3 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.4p4:*:*:*:*:*:*:* Versions 1.7.4p4 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.4p5:*:*:*:*:*:*:* Versions 1.7.4p5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.4p6:*:*:*:*:*:*:* Versions 1.7.4p6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.5:*:*:*:*:*:*:* Versions 1.7.5 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.6:*:*:*:*:*:*:* Versions 1.7.6 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.6p1:*:*:*:*:*:*:* Versions 1.7.6p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.6p2:*:*:*:*:*:*:* Versions 1.7.6p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.7:*:*:*:*:*:*:* Versions 1.7.7 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.8:*:*:*:*:*:*:* Versions 1.7.8 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.8p1:*:*:*:*:*:*:* Versions 1.7.8p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.8p2:*:*:*:*:*:*:* Versions 1.7.8p2 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.9:*:*:*:*:*:*:* Versions 1.7.9 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.9p1:*:*:*:*:*:*:* Versions 1.7.9p1 Vulnerable ·Todd Miller
  • cpe:2.3:a:todd_miller:sudo:1.7.10:*:*:*:*:*:*:* Versions 1.7.10 Vulnerable ·Todd Miller

Remediation

Red Hat 1 advisory

  • RHSA-2013:1353 Released 2013-09-30 · Red Hat rating Low
    sudo security and bug fix update
    • Red Hat Enterprise Linux (v. 5 server) sudo-1.7.2p1-28.el5, sudo-1.7.2p1-28.el5.i386, sudo-1.7.2p1-28.el5.ia64 +1
    • Red Hat Enterprise Linux Desktop (v. 5 client) sudo-1.7.2p1-28.el5, sudo-1.7.2p1-28.el5.i386

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2013:1353
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2013:1353
Red Hat Enterprise Linux Desktop (v. 6)Fixed—
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed—
Red Hat Enterprise Linux HPC Node (v. 6)Fixed—
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed—
Red Hat Enterprise Linux Server (v. 6)Fixed—
Red Hat Enterprise Linux Server Optional (v. 6)Fixed—
Red Hat Enterprise Linux Workstation (v. 6)Fixed—
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed—

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1776
  2. 2026-10-03 Alias added: GHSA-wjjf-2f85-8256

References

Advisory 7

Other 7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences