CVE-2017-1000367
MEDIUM 6.4EPSS 8.0%
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
- CVSS v3.0 NVD
- 6.4 MEDIUM
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 8.00% chance of exploitation in the next 30 days, 95th percentile
- Published
- 2017-06-05
- Updated
- 2024-08-05
Proof-of-concept exploits (4)
- http://packetstormsecurity.com/files/142783/Sudo-get_process_ttyname-Race-Condition.html
- c0d3z3r0/sudo-CVE-2017-1000367114★ · 2017-06-05
- homjxi0e/CVE-2017-10003671★ · 2017-06-04
- pucerpocok/sudo_exploit6★ · 2017-06-08
ExploitDB entries (1)
Exploit collections (1)
- CVE-2017-1000367helloexp/0day
Security advisories
- https://www.sudo.ws/alerts/linux_tty.html
- http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html
- http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00078.html
- http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00079.html
- http://seclists.org/fulldisclosure/2017/Jun/3
- http://www.debian.org/security/2017/dsa-3867
- http://www.openwall.com/lists/oss-security/2017/05/30/16
- http://www.securityfocus.com/bid/98745
- http://www.securitytracker.com/id/1038582
- http://www.ubuntu.com/usn/USN-3304-1
- https://access.redhat.com/errata/RHSA-2017:1381
- https://access.redhat.com/errata/RHSA-2017:1382
- https://security.gentoo.org/glsa/201705-15