CVE-2013-2776: sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl...

Security readout for executives and security teams

This is an old sudo authorization-boundary flaw. On specific systems, a local user who already has sudo permissions could misuse another terminal's cached sudo authorization. It is not described as remotely exploitable, but it matters on shared administrative hosts and legacy Unix-like systems. Exposure is most likely on legacy systems running vulnerable sudo versions with tty_tickets enabled and lacking /proc or sysctl support. Modern managed Linux fleets are less likely to match all conditions, but embedded, appliance, Unix, or long-lived server images should be checked. Treat as a targeted legacy-platform risk, not an internet-wide emergency. Prioritize remediation where multiple administrators share hosts or where sudo package currency is poor. Normal patch governance is appropriate unless exposed shared systems are found. Mitigation focus: Update sudo through the operating system vendor's security advisory channel.; Replace sudo versions within the affected ranges with fixed vendor-supported builds.; Prioritize shared administrative hosts and systems with multiple local sudo users..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.