Red Hat Security Advisory

RHSA-2017:1381

sudo security update

Released 2017-05-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 5 ELS) sudo-1.7.2p1-30.el5_11, sudo-1.7.2p1-30.el5_11.i386

Fixes 1 record

TI-2017-14587 CVE-2017-1000367 · GHSA-4c2x-g299-mpv8

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation…

LOW 39

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.

CVSS 3.0MEDIUM 6.4 Local High privileges No interaction EPSS 0.08068 Published 2017-06-05 Fixed CWE-362