Lucene search

K
cvelistMitreCVELIST:CVE-2014-9680
HistoryApr 24, 2017 - 6:12 a.m.

CVE-2014-9680

2017-04-2406:12:00
mitre
www.cve.org
2

3.9 Low

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.