Doas Project

Doas is a lightweight privilege-escalation utility for Unix-like systems that provides a minimal alternative to sudo, and its vulnerability surface reflects the access-control and error-handling demands of managing privilege transitions. The recurring weakness classes—including improper checks for exceptional conditions, privilege management flaws, authorization errors, unchecked return values, and use of uninitialized resources—are characteristic of a small, security-sensitive codebase where subtle logic gaps in privilege or state handling can have outsized impact. Current severity, exploitation status, and exposure counts are shown alongside this summary.