https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T17:52:19.850870+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-18634 CVE-2019-18634 2026-10-02T17:52:19.905116+00:00

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

 https://vulnerability.circl.lu/vuln/usn-4263-1 USN-4263-1 — sudo vulnerability 2026-10-02T17:52:19.905229+00:00

Affected: Ubuntu:16.04:LTS: sudo, Ubuntu:18.04:LTS: sudo

Joe Vennix discovered that Sudo incorrectly handled memory operations when the pwfeedback option is enabled. A local attacker could possibly use this issue to obtain unintended access to the administrator account.