sudo-rs is a memory safe implementation of sudo and su written in Rust. With `Defaults targetpw` (or `Defaults rootpw`) enabled, the password of the target account (or root account) instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10 incorrectly recorded the invoking user’s UID instead of the authenticated-as user's UID in the authentication timestamp. Any later `sudo` invocation on the same terminal while the timestamp was still valid would use that timestamp, potentially bypassing new authentication even if the policy would have required it. A highly-privileged user (able to run commands as other users, or as root, through sudo) who knows one password of an account they are allowed to run commands as, would be able to run commands as any other account the policy permits them to run commands for, even if they don't know the password for those accounts. A common instance of this would be that a user can still use their own password to run commands as root (the default behaviour of `sudo`), effectively negating the intended behaviour of the `targetpw` or `rootpw` options. Version 0.2.10 contains a patch for the issue. Versions prior to 0.2.5 are not affected, since they do not offer `Defaults targetpw` or `Defaults rootpw`.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-4388808bbf advisory.

    Update to version 0.2.10.

    This release includes fixes for CVE-2025-64170 and CVE-2025-64517.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ada7909175 advisory.

    Update to version 0.2.10.

    This release includes fixes for CVE-2025-64170 and CVE-2025-64517.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a9d9780cbb advisory.

    Update to version 0.2.10.

    This release includes fixes for CVE-2025-64170 and CVE-2025-64517.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bf6c9252-c2ec-11f0-8372-98b78501ef2a advisory.

    Trifecta Tech Foundation reports:
    With Defaults targetpw (or Defaults rootpw) enabled, the password of the               target account (or root account) instead of the invoking user is used for authentication.
              sudo-rs prior to 0.2.10 incorrectly recorded the invoking users UID instead of the               authenticated-as user's UID in the authentication timestamp. Any later sudo invocation               on the same terminal while the timestamp was still valid would use that timestamp,               potentially bypassing new authentication even if the policy would have required it.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
276890	Fedora 42 : sudo-rs (2025-4388808bbf)	Nessus	Fedora Local Security Checks	medium
276889	Fedora 41 : sudo-rs (2025-ada7909175)	Nessus	Fedora Local Security Checks	medium
276879	Fedora 43 : sudo-rs (2025-a9d9780cbb)	Nessus	Fedora Local Security Checks	medium
275571	FreeBSD : sudo-rs -- Authenticating user not recorded properly in timestamp (bf6c9252-c2ec-11f0-8372-98b78501ef2a)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2025-64517

medium

Tenable Plugins

medium

medium

medium

medium