CVE-2025-64170
1 advisory.
crates.io/sudo-rs CVE-2025-64170: low 3.8, EPSS 0.15%
sudo-rs: Partial password reveal is possible after timeout
Action: Upgrade sudo-rs to 0.2.10 or later.
cargo update -p sudo-rs --precise 0.2.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.7 | 0.2.10 | - |
Fixed versions
| 0.2.10 |
Sources
- osv: GHSA-c978-wq47-pvvw
- https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-c978-wq47-pvvw
- https://nvd.nist.gov/vuln/detail/CVE-2025-64170
- https://github.com/trifectatechfoundation/sudo-rs/commit/0e3d3837aec3ee9fb5dcb8bfe11e8adb367f58f4
- https://github.com/trifectatechfoundation/sudo-rs
- https://github.com/trifectatechfoundation/sudo-rs/releases/tag/v0.2.10
CVE-2025-64170 · published · modified · JSON