CVE-2017-1000367

CVE-2017-1000367 We discovered a vulnerability in Sudo’s getprocessttyname for Linux: this function opens “/proc/pid/stat” man proc and reads the device number of the tty from field 7 ttynr. Unfortunately, these fields are space-separated and field 2 comm, the filename of the command can contain...