suse · CVE-2012-2337

Quick triage

Priority: high Published: 2021-05-30 13:03:41 UTC Updated: 2026-04-18 19:50:12 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-2337 severity important: SUSE including 29 source package names (sudo-1.7.6p2-0.17.5, sudo-1.7.6p2-0.2.8.1, …), 39 product×package rows across 30 product lines (SUSE Linux Enterprise Desktop 12, SUSE Linux Enterprise Desktop 12 SP1, … (30 product lines)): Fixed 39.

Description:

sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which allows local users to bypass intended command restrictions in opportunistic circumstances by executing a command on a host that has an IPv4 address.

cvelogic Threat Intelligence