CVE-2017-1000367

8 known exploits for CVE-2017-1000367

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.

Affected products: Alt Linux, Centos, Red Hat, Suse, Ubuntu, Sudo
Sudo Project Sudo: ≤ 1.8.20

CVSS 2.0: 6.9 MEDIUM
CVSS 3.1: 6.4 MEDIUM
EPSS: 8.0% (94th percentile)
Weakness: CWE-362
NVD status: Modified
Published: 2017-06-05

CVE-2017-1000367 at NVD

Authoritative description, scoring and affected products

Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation Framework

2017-11-04 KitPloitKITPLOIT

Sudo - get_process_ttyname() Privilege Escalation Vulnerability

2017-06-16 Qualys CorporationZDTC

Sudo 1.8.20 - get_process_ttyname() Local Privilege Escalation

2017-06-14 Qualys CorporationEXPLOITPACKC

Sudo 1.8.20 - 'get_process_ttyname()' Local Privilege Escalation

2017-06-14 Qualys CorporationEXPLOITDBC

Sudo get_process_ttyname() Race Condition Vulnerability

2017-06-03 QualysZDT

Sudo get_process_ttyname() Race Condition

2017-06-02 qualys.comPACKETSTORM

Exploit for Race Condition in Sudo_Project Sudo

2017-06-01 bjkingGITEE

CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux

2017-05-31 RootSEEBUGC