Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

trifectatechfoundation/sudo-rs

              main @ 54b19e8
            

Fixes

CVEs

HIGH

Peak severity

32.3%

Coverage

Highlights

Auth Bypass: 23 prior fixes. Scrutinize any change in this area.

src/sudo/pipeline.rs: most-fixed (5 issues). Treat as high-risk during review.

35 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Session timestamp tracking and PAM status verification previously permitted authentication bypasses (e.g., when targetpw was used) or allowed execution by expired/locked accounts. Ensuring exact context-awareness during multi-step PAM transactions is vital.

Sandbox Escape: Bypasses in NOEXEC restriction policies occurred when syscall architectures were not properly restricted under seccomp, allowing processes to call forbidden exec systems calls.

Privilege Escalation: Failure to robustly check and assert privilege drop states (such as verifying libc::setuid return values and process real vs effective UID) represents an immediate privilege escalation risk.