CVE-2013-1775: sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attac...

Security readout for executives and security teams

This sudo flaw lets someone with local or physical access preserve sudo privileges past the intended timeout by manipulating time-related state. It is not described as a remote takeover. The business risk is highest on older Unix-like systems where untrusted users have shell access or where physical access controls are weak. Exposure is likely limited to legacy systems running affected sudo versions, including distributions covered by Debian, Ubuntu, Red Hat, SUSE, Slackware, Apple, and Oracle advisories. Systems without local users or physical access paths have lower practical exposure. Prioritize remediation on legacy multi-user systems, shared administration hosts, and physically accessible endpoints. This is not a top-tier remote emergency based on the provided evidence, but it can weaken privilege boundaries where sudo access is already part of operations. Mitigation focus: Upgrade sudo beyond the affected version ranges using vendor-supported packages.; Apply relevant operating system advisories for Debian, Ubuntu, Red Hat, SUSE, Apple, Oracle, or Slackware.; Restrict who can change system time and protect physical console access..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.