CVE-2017-1000367 Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
MediumCVSS 6.4
EPSS 8.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/sudo(Debian:12) | < 1.8.20p1-1 | 1.8.20p1-1 |
| debian/sudo(Debian:13) | < 1.8.20p1-1 | 1.8.20p1-1 |
| debian/sudo(Debian:14) | < 1.8.20p1-1 | 1.8.20p1-1 |
| sudo project sudo | <= 1.8.20 | No fix listed |
References
- Debian Security Tracker CVE-2017-1000367 vendor-advisory
- bugs.debian.org issue-tracking
- SUSE-SU-2017:1446 third-party-advisory vendor-advisory
- SUSE-SU-2017:1450 third-party-advisory vendor-advisory
- openSUSE-SU-2017:1455 third-party-advisory vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20170602 Qualys Security Advisory - CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux mailing-list third-party-advisory
- DSA-3867 third-party-advisory vendor-advisory
- [oss-security] 20170530 Qualys Security Advisory - CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux exploit mailing-list third-party-advisory
- [oss-security] 20221222 Re: [Linux] /proc/pid/stat parsing bugs mailing-list
- [oss-security] 20221222 Re: [Linux] /proc/pid/stat parsing bugs mailing-list
- 98745 third-party-advisory vdb-entry
- 1038582 exploit third-party-advisory vdb-entry
- USN-3304-1 third-party-advisory vendor-advisory
- RHSA-2017:1381 third-party-advisory vendor-advisory
- RHSA-2017:1382 third-party-advisory vendor-advisory
- FEDORA-2017-54580efa82 vendor-advisory
- GLSA-201705-15 third-party-advisory vendor-advisory
- 42183 exploit third-party-advisory vdb-entry
- www.sudo.ws vendor-advisory