A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root.

References

access.redhat.com/security/vulnerabilities/3059071 https://www.sudo.ws/alerts/linux_tty.html

bugzilla.redhat.com/show_bug.cgi?id=1453074

nessus 44

exploitpack 1

thn 1

f5 2

fedora 3

oraclelinux 2

archlinux 1

suse 6

debian 4

debiancve 1

centos 2

openvas 27

cve 1

mageia 1

altlinux 1

osv 3

seebug 1

ubuntucve 1

veracode 1

packetstorm 1

threatpost 1

cloudfoundry 1

redhat 3

amazon 3

prion 1

ubuntu 1

slackware 1

gentoo 1

exploitdb 1

ibm 2

redhatcve 1

qualysblog 1

photon 1

kitploit 1

nessus

EulerOS 2.0 SP2 : sudo (EulerOS-SA-2017-1107)

2017-06-09 00:00:00

Virtuozzo 6 : sudo / sudo-devel (VZLSA-2017-1382)

2017-07-13 00:00:00

CentOS 6 / 7 : sudo (CESA-2017:1382)

2017-06-01 00:00:00

exploitpack

Sudo 1.8.20 - get_process_ttyname() Local Privilege Escalation

2017-06-14 00:00:00

thn

High-Severity Linux Sudo Flaw Allows Users to Gain Root Privileges

2017-05-31 21:28:00

sudo vulnerability CVE-2017-1000367

2017-06-13 21:52:00

K23151384 : Sudo vulnerabilities CVE-2017-1000367 and CVE-2017-1000368

2017-06-13 00:00:00

fedora

[SECURITY] Fedora 25 Update: sudo-1.8.20p2-1.fc25

2017-06-03 02:37:39

[SECURITY] Fedora 24 Update: sudo-1.8.20p2-1.fc24

2017-06-08 06:53:51

[SECURITY] Fedora 26 Update: sudo-1.8.20p2-1.fc26

2017-06-09 20:21:45

oraclelinux

sudo security update

2017-06-01 00:00:00

sudo security update

2017-05-30 00:00:00

archlinux

[ASA-201705-25] sudo: access restriction bypass

2017-05-30 00:00:00

suse

Security update for sudo (important)

2017-05-30 21:11:15

Security update for sudo (important)

2017-05-30 21:08:58

Security update for sudo (important)

2017-05-31 12:09:28

debian

[SECURITY] [DLA 970-1] sudo security update

2017-05-30 23:41:12

[SECURITY] [DSA 3867-1] sudo security update

2017-05-30 15:37:59

[SECURITY] [DSA 3867-1] sudo security update

2017-05-30 15:37:59

debiancve

CVE-2017-1000367

2017-06-05 14:29:00

centos

sudo security update

2017-05-31 14:06:33

sudo security update

2017-06-22 20:51:03

openvas

SUSE: Security Advisory (SUSE-SU-2017:1446-1)

2021-04-19 00:00:00

RedHat Update for sudo RHSA-2017:1382-01

2017-05-31 00:00:00

CentOS Update for sudo CESA-2017:1382 centos6

2017-06-01 00:00:00

cve

CVE-2017-1000367

2017-06-05 14:29:00

mageia

Updated sudo packages fix security vulnerability

2017-07-13 12:10:46

altlinux

Security fix for the ALT Linux 8 package sudo version 1:1.8.20p1-alt1

2017-05-31 00:00:00

osv

CVE-2017-1000367

2017-06-05 14:29:00

sudo - security update

2017-05-30 00:00:00

sudo - security update

2017-05-30 00:00:00

seebug

CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux

2017-05-31 00:00:00

ubuntucve

CVE-2017-1000367

2017-05-30 00:00:00

veracode

Privilege Escalation

2019-01-15 09:17:30

packetstorm

Sudo get_process_ttyname() Race Condition

2017-06-02 00:00:00

threatpost

Patches Available for Linux Sudo Vulnerability

2017-05-31 13:55:30

cloudfoundry

USN-3304-1: Sudo vulnerability | Cloud Foundry

2017-06-12 00:00:00

redhat

(RHSA-2017:1381) Important: sudo security update

2017-05-30 00:00:00

(RHSA-2017:1382) Important: sudo security update

2017-05-30 15:55:46

(RHSA-2017:1574) Moderate: sudo security update

2017-06-22 17:25:15

amazon

Important: sudo

2017-06-06 17:08:00

Medium: sudo

2017-07-06 19:03:00

Important: sudo

2019-10-11 22:07:00

prion

Design/Logic Flaw

2017-06-05 14:29:00

ubuntu

Sudo vulnerability

2017-05-30 00:00:00

slackware

[slackware-security] sudo

2017-05-30 17:42:26

gentoo

sudo: Privilege escalation

2017-05-30 00:00:00

exploitdb

Sudo 1.8.20 - 'get_process_ttyname()' Local Privilege Escalation

2017-06-14 00:00:00

ibm

Security Bulletin: A vulnerability in sudo affects PowerKVM

2018-06-18 01:36:34

Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry

2020-07-19 00:49:12

redhatcve

CVE-2017-1000368

2017-06-06 12:49:37

qualysblog

The Stack Clash

2017-06-19 15:14:57

photon

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0021

2017-06-22 00:00:00

kitploit

Kernelpop - Kernel Privilege Escalation Enumeration And Exploitation Framework

2017-11-04 13:30:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
OpenSource

@2024 Vulners Inc

6.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

JSON

Related for RH:CVE-2017-1000367