Podatność CVE-2017-1000367

Podatność CVE-2017-1000367

Publikacja: 2017-06-05

Opis:

	Tytuł	Autor	Data
High	Sudo get_process_ttyname() Race Condition	Qualys	03.06.2017
Med.	Sudo get_process_ttyname() Privilege Escalation	Qualys	16.06.2017

Typ:

Ogólna skala CVSS	Znaczenie	Łatwość wykorzystania
6.9/10	10/10	3.4/10

Affected software
Todd miller -> SUDO
Sudo project -> SUDO

http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html

http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00078.html

http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00079.html

http://packetstormsecurity.com/files/142783/Sudo-get_process_ttyname-Race-Condition.html

http://seclists.org/fulldisclosure/2017/Jun/3

http://www.debian.org/security/2017/dsa-3867

http://www.openwall.com/lists/oss-security/2017/05/30/16

http://www.securityfocus.com/bid/98745

http://www.securitytracker.com/id/1038582

http://www.ubuntu.com/usn/USN-3304-1

https://access.redhat.com/errata/RHSA-2017:1381

https://access.redhat.com/errata/RHSA-2017:1382

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VXEXC4NNIG2QOZY6N2YUK246KI3D3UQO/

https://security.gentoo.org/glsa/201705-15

https://www.exploit-db.com/exploits/42183/

https://www.sudo.ws/alerts/linux_tty.html