CVE-2017-1000367

🗓️ 05 Jun 2017 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 284 Views🌐 WEB

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) resulting in information disclosure and command execution

Reporter	Title	Published	Views	Family All 143
Gitee	Exploit for Race Condition in Sudo_Project Sudo	1 Jun 201717:41	–	gitee
0day.today	Sudo get_process_ttyname() Race Condition Vulnerability	3 Jun 201700:00	–	zdt
0day.today	Sudo - get_process_ttyname() Privilege Escalation Vulnerability	16 Jun 201700:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in sudo affects PowerKVM	18 Jun 201801:36	–	ibm
ALT Linux	Security fix for the ALT Linux 8 package sudo version 1:1.8.20p1-alt1	31 May 201700:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : sudo (ALAS-2019-1315)	15 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : sudo (ALAS-2017-843)	7 Jun 201700:00	–	nessus
Tenable Nessus	Amazon Linux AMI : sudo (ALAS-2017-855)	7 Jul 201700:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : sudo (CESA-2017:1382)	1 Jun 201700:00	–	nessus

NVD

Node

sudo_project sudoRange≤1.8.20

Source	Link
securityfocus	www.securityfocus.com/bid/98745
openwall	www.openwall.com/lists/oss-security/2017/05/30/16
access	www.access.redhat.com/errata/RHSA-2017:1382
security	www.security.gentoo.org/glsa/201705-15
ubuntu	www.ubuntu.com/usn/USN-3304-1
lists	www.lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html
access	www.access.redhat.com/errata/RHSA-2017:1381
seclists	www.seclists.org/fulldisclosure/2017/Jun/3
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VXEXC4NNIG2QOZY6N2YUK246KI3D3UQO/
openwall	www.openwall.com/lists/oss-security/2022/12/22/5

Parameter	Position	Path	Description	CWE
field 7 (tty_nr)	path	/proc/[pid]/stat	Vulnerability in get_process_ttyname() reads tty_nr from /proc/[pid]/stat which can be manipulated via spaces in comm field, enabling spoofing of tty devices during traversal.	CWE-362
device number 34873	path	/dev/shm/_tmp/ 34873	Symlink path with a specific device number used to trigger the vulnerability during sudo invocation.	CWE-362

13 May 2026 00:24Current

6.8Medium risk

Vulners AI Score6.8

CVSS 36.4

CVSS 26.9

EPSS0.19918

CWE-362