sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered are echoed back to the console. This could reveal partial password information, possibly exposing history files when not carefully handled by the user and on screen, usable for Social Engineering or Pass-By attacks. Version 0.2.10 fixes the issue.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4388808bbf advisory.

    Update to version 0.2.10.

    This release includes fixes for CVE-2025-64170 and CVE-2025-64517.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ada7909175 advisory.

    Update to version 0.2.10.

    This release includes fixes for CVE-2025-64170 and CVE-2025-64517.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a9d9780cbb advisory.

    Update to version 0.2.10.

    This release includes fixes for CVE-2025-64170 and CVE-2025-64517.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c1ceaaea-c2e7-11f0-8372-98b78501ef2a advisory.

    Trifecta Tech Foundation reports:
    When typing partial passwords but not pressing return for a long time,               a password timeout can occur. When this happens, the keys pressed are               replayed onto the console.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276890	Fedora 42 : sudo-rs (2025-4388808bbf)	Nessus	Fedora Local Security Checks	medium
276889	Fedora 41 : sudo-rs (2025-ada7909175)	Nessus	Fedora Local Security Checks	medium
276879	Fedora 43 : sudo-rs (2025-a9d9780cbb)	Nessus	Fedora Local Security Checks	medium
275572	FreeBSD : sudo-rs -- Partial password reveal when password timeout occurs (c1ceaaea-c2e7-11f0-8372-98b78501ef2a)	Nessus	FreeBSD Local Security Checks	low

Detections

Analytics

CVE-2025-64170

low

Tenable Plugins

medium

medium

medium

low