Red Hat Security AdvisoryRHSA-2017:1382
sudo security update
Released 2017-05-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) sudo-1.8.6p7-22.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) sudo-devel-1.8.6p7-22.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) sudo-1.8.6p7-22.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) sudo-devel-1.8.6p7-22.el7_3
- Red Hat Enterprise Linux Desktop (v. 6) sudo-1.8.6p3-28.el6_9
- Red Hat Enterprise Linux Desktop Optional (v. 6) sudo-devel-1.8.6p3-28.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) sudo-1.8.6p3-28.el6_9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) sudo-devel-1.8.6p3-28.el6_9
- Red Hat Enterprise Linux Server (v. 6) sudo-1.8.6p3-28.el6_9
- Red Hat Enterprise Linux Server (v. 7) sudo-1.8.6p7-22.el7_3
- Red Hat Enterprise Linux Server Optional (v. 6) sudo-devel-1.8.6p3-28.el6_9, sudo-devel-1.8.6p3-28.el6_9.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) sudo-devel-1.8.6p7-22.el7_3, sudo-devel-1.8.6p7-22.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 6) sudo-1.8.6p3-28.el6_9
- Red Hat Enterprise Linux Workstation (v. 7) sudo-1.8.6p7-22.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) sudo-devel-1.8.6p3-28.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) sudo-devel-1.8.6p7-22.el7_3
Fixes 1 record
Priority LOW 39
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
CVSS 3.0MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.08068 · Published 2017-06-05 · Fixed CWE-362
