sudo 1.3.5 through 1.7.10 and 1.8.0 through 1.8.5, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.
Conclusion & alert: CVE-2013-1776 is rated Low Risk (24.7/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.08%). Mandatory action: Monitor for updates and reassess as exploit intelligence or EPSS changes.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2025-03-17 | 0.04% | 0.08% | +0.03% |
| 2 | 2023-03-07 | 1.55% | 0.04% | -1.50% |
| 3 | 2022-02-04 | — | 1.55% | — |
Full EPSS history (3 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 4.4 | 2.0 | MEDIUM |
|
3.4 | 6.4 | [email protected] |
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
not yet assigned | CVE-2013-1776 not yet assigned priority: Debian including 1 source packages (sudo), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. | https://security-tracker.debian.org/tracker/CVE-2013-1776 |
gentoo
|
high | CVE-2013-1776: 1 GLSA(s) (201401-23), 1 atom(s) (app-admin/sudo); latest impact high. | https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2013-1776 |
redhat
|
low | — | https://access.redhat.com/security/cve/CVE-2013-1776 |
suse
|
low | CVE-2013-1776 severity low: SUSE including 33 source package names (sudo, sudo-1.7.6p2-0.17.5, …), 129 product×package rows across 86 product lines (HPE Helion OpenStack 8, SUSE CaaS Platform 4.0, … (86 product lines)): Known Not Affected 86, Fixed 43. | https://www.suse.com/security/cve/CVE-2013-1776/ |
ubuntu
|
low | CVE-2013-1776 low priority: Ubuntu including 1 source packages (sudo), 6 status rows across 6 suites (hardy, lucid, oneiric, precise, quantal, upstream): ignored 5, released 1. | https://ubuntu.com/security/CVE-2013-1776 |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| apple | mac_os_x | <= 10.10.4 | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.0 | cpe:2.3:a:todd_miller:sudo:1.8.0:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.1 | cpe:2.3:a:todd_miller:sudo:1.8.1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.1p1 | cpe:2.3:a:todd_miller:sudo:1.8.1p1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.1p2 | cpe:2.3:a:todd_miller:sudo:1.8.1p2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.2 | cpe:2.3:a:todd_miller:sudo:1.8.2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.3 | cpe:2.3:a:todd_miller:sudo:1.8.3:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.3p1 | cpe:2.3:a:todd_miller:sudo:1.8.3p1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.3p2 | cpe:2.3:a:todd_miller:sudo:1.8.3p2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.4 | cpe:2.3:a:todd_miller:sudo:1.8.4:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.4p1 | cpe:2.3:a:todd_miller:sudo:1.8.4p1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.4p2 | cpe:2.3:a:todd_miller:sudo:1.8.4p2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.4p3 | cpe:2.3:a:todd_miller:sudo:1.8.4p3:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.4p4 | cpe:2.3:a:todd_miller:sudo:1.8.4p4:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.4p5 | cpe:2.3:a:todd_miller:sudo:1.8.4p5:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.8.5 | cpe:2.3:a:todd_miller:sudo:1.8.5:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.3.5 | cpe:2.3:a:todd_miller:sudo:1.3.5:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6 | cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.1 | cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.2 | cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.2p3 | cpe:2.3:a:todd_miller:sudo:1.6.2p3:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.3 | cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.3_p7 | cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.4 | cpe:2.3:a:todd_miller:sudo:1.6.4:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.4p2 | cpe:2.3:a:todd_miller:sudo:1.6.4p2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.5 | cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.6 | cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.7 | cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.7p5 | cpe:2.3:a:todd_miller:sudo:1.6.7p5:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.8 | cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.8p12 | cpe:2.3:a:todd_miller:sudo:1.6.8p12:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.9 | cpe:2.3:a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.9p20 | cpe:2.3:a:todd_miller:sudo:1.6.9p20:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.9p21 | cpe:2.3:a:todd_miller:sudo:1.6.9p21:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.9p22 | cpe:2.3:a:todd_miller:sudo:1.6.9p22:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.6.9p23 | cpe:2.3:a:todd_miller:sudo:1.6.9p23:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.0 | cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.1 | cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.2 | cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.2p1 | cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.2p2 | cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.2p3 | cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.2p4 | cpe:2.3:a:todd_miller:sudo:1.7.2p4:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.2p5 | cpe:2.3:a:todd_miller:sudo:1.7.2p5:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.2p6 | cpe:2.3:a:todd_miller:sudo:1.7.2p6:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.2p7 | cpe:2.3:a:todd_miller:sudo:1.7.2p7:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.3b1 | cpe:2.3:a:todd_miller:sudo:1.7.3b1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.4 | cpe:2.3:a:todd_miller:sudo:1.7.4:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.4p1 | cpe:2.3:a:todd_miller:sudo:1.7.4p1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.4p2 | cpe:2.3:a:todd_miller:sudo:1.7.4p2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.4p3 | cpe:2.3:a:todd_miller:sudo:1.7.4p3:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.4p4 | cpe:2.3:a:todd_miller:sudo:1.7.4p4:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.4p5 | cpe:2.3:a:todd_miller:sudo:1.7.4p5:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.4p6 | cpe:2.3:a:todd_miller:sudo:1.7.4p6:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.5 | cpe:2.3:a:todd_miller:sudo:1.7.5:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.6 | cpe:2.3:a:todd_miller:sudo:1.7.6:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.6p1 | cpe:2.3:a:todd_miller:sudo:1.7.6p1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.6p2 | cpe:2.3:a:todd_miller:sudo:1.7.6p2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.7 | cpe:2.3:a:todd_miller:sudo:1.7.7:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.8 | cpe:2.3:a:todd_miller:sudo:1.7.8:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.8p1 | cpe:2.3:a:todd_miller:sudo:1.7.8p1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.8p2 | cpe:2.3:a:todd_miller:sudo:1.7.8p2:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.9 | cpe:2.3:a:todd_miller:sudo:1.7.9:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.9p1 | cpe:2.3:a:todd_miller:sudo:1.7.9p1:*:*:*:*:*:*:* |
| todd_miller | sudo | 1.7.10 | cpe:2.3:a:todd_miller:sudo:1.7.10:*:*:*:*:*:*:* |