CVE ID:	CVE-2023-42465
Description:	Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2024.1326   1.3.6.1.4.1.25623.1.1.2.2024.1229   1.3.6.1.4.1.25623.1.1.2.2024.1640   1.3.6.1.4.1.25623.1.1.4.2024.0796.1   1.3.6.1.4.1.25623.1.1.2.2024.1755   1.3.6.1.4.1.25623.1.0.885628   1.3.6.1.4.1.25623.1.1.2.2024.1537   1.3.6.1.4.1.25623.1.1.4.2024.0795.2   1.3.6.1.4.1.25623.1.1.4.2024.0797.1   1.3.6.1.4.1.25623.1.0.856039   1.3.6.1.4.1.25623.1.1.4.2024.0795.1   1.3.6.1.4.1.25623.1.1.4.2024.0834.1   1.3.6.1.4.1.25623.1.0.856036   1.3.6.1.4.1.25623.1.0.885724   1.3.6.1.4.1.25623.1.1.4.2024.0889.1   1.3.6.1.4.1.25623.1.1.4.2024.0890.1   1.3.6.1.4.1.25623.1.1.9.2024.57101101981000963   1.3.6.1.4.1.25623.1.1.4.2024.0877.1   1.3.6.1.4.1.25623.1.1.2.2024.1621   1.3.6.1.4.1.25623.1.1.4.2024.0796.2   1.3.6.1.4.1.25623.1.1.2.2024.1251   1.3.6.1.4.1.25623.1.1.4.2024.0797.2   1.3.6.1.4.1.25623.1.1.2.2024.1348   1.3.6.1.4.1.25623.1.0.856033   1.3.6.1.4.1.25623.1.1.2.2024.1556   1.3.6.1.4.1.25623.1.1.2.2024.1778
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2023-42465 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R4Q23NHCKCLFIHSNY6KJ27GM7FSCEVXM/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U6XMRUJCPII4MPWG43HTYR76DGLEYEFZ/ https://security.gentoo.org/glsa/202401-29 https://arxiv.org/abs/2309.02545 https://github.com/sudo-project/sudo/commit/7873f8334c8d31031f8cfa83bd97ac6029309e4f https://www.openwall.com/lists/oss-security/2023/12/21/9 https://www.sudo.ws/releases/changelog/