CVE-2017-1000368: Improper Input Validation

Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation embedded newlines in the getprocessttyname function resulting in information disclosure and command execution...

CVE-2017-1000368

Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation embedded newlines in the getprocessttyname function resulting in information disclosure and command execution...

UBUNTU-CVE-2017-1000368

Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation embedded newlines in the getprocessttyname function resulting in information disclosure and command execution...

CVE-2017-1000367

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...

CVE-2017-1000367: Concurrent Execution using Shared Resource with Improper Synchronization

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...

CVE-2017-1000367

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...

CVE-2017-1000367

The sudo utility (version 1.8.20 and earlier) is vulnerable to a privilege escalation flaw due to insufficient input validation in the get_process_ttyname() function. A local attacker with permission to execute commands via sudo can exploit how the program parses tty information from the proc fil...

[SECURITY] Fedora 25 Update: sudo-1.8.20p2-1.fc25

Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as root while logging all commands and arguments. Sudo operates on a per-command basis. It is not a replacement for the shell. Features include: the ability to restrict...

Sudo get_process_ttyname() Race Condition Vulnerability

Sudo's getprocessttyname on Linux suffers from a race condition that allows for root privilege escalation. Qualys Security Advisory CVE-2017-1000367 in Sudo's getprocessttyname for Linux ======================================================================== Contents...

Fedora Update for sudo FEDORA-2017-54580efa82

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : sudo (RHSA-2017:1381)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:1381 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

PT-2017-2230

Name of the Vulnerable Software and Affected Versions sudo versions 1.8.20p1 and earlier Description The issue is related to insufficient input validation, specifically embedded newlines, in the get process ttyname function. This can result in information disclosure and command execution. A remot...

Sudo get_process_ttyname() Race Condition

Qualys Security Advisory CVE-2017-1000367 in Sudo's getprocessttyname for Linux ======================================================================== Contents ======================================================================== Analysis Exploitation Example Acknowledgments...

Exploit for Race Condition in Sudo_Project Sudo

PoC exploit for CVE-2017-1000367, a vulnerability in the Linux sudo command. The target is the Linux operating system, specifically the sudo command. The vulnerability class is a privilege escalation vulnerability, allowing an attacker to gain root privileges. The probable entry point is the...

CentOS 6 / 7 : sudo (CESA-2017:1382)

An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

openSUSE: Security Advisory for sudo (openSUSE-SU-2017:1455-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS Update for sudo CESA-2017:1382 centos6

Check the version of sudo SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882729";...

CentOS Update for sudo CESA-2017:1382 centos7

Check the version of sudo SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882727";...

High-Severity Linux Sudo Flaw Allows Users to Gain Root Privileges

A high-severity vulnerability has been reported in Linux that could be exploited by a low privilege attacker to gain full root access on an affected system. The vulnerability, identified as CVE-2017-1000367, was discovered by researchers at Qualys Security in Sudo's "getprocessttyname" function f...

sudo security update

CentOS Errata and Security Advisory CESA-2017:1382 An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, whi...