Red Hat Security AdvisoryRHSA-2017:1574
sudo security update
Released 2017-06-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) sudo-1.8.6p7-23.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) sudo-devel-1.8.6p7-23.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) sudo-1.8.6p7-23.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) sudo-devel-1.8.6p7-23.el7_3
- Red Hat Enterprise Linux Desktop (v. 6) sudo-1.8.6p3-29.el6_9
- Red Hat Enterprise Linux Desktop Optional (v. 6) sudo-devel-1.8.6p3-29.el6_9
- Red Hat Enterprise Linux HPC Node (v. 6) sudo-1.8.6p3-29.el6_9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) sudo-devel-1.8.6p3-29.el6_9
- Red Hat Enterprise Linux Server (v. 5 ELS) sudo-1.7.2p1-31.el5_11, sudo-1.7.2p1-31.el5_11.i386
- Red Hat Enterprise Linux Server (v. 6) sudo-1.8.6p3-29.el6_9
- Red Hat Enterprise Linux Server (v. 7) sudo-1.8.6p7-23.el7_3
- Red Hat Enterprise Linux Server Optional (v. 6) sudo-devel-1.8.6p3-29.el6_9, sudo-devel-1.8.6p3-29.el6_9.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) sudo-devel-1.8.6p7-23.el7_3, sudo-devel-1.8.6p7-23.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 6) sudo-1.8.6p3-29.el6_9
- Red Hat Enterprise Linux Workstation (v. 7) sudo-1.8.6p7-23.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) sudo-devel-1.8.6p3-29.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 7) sudo-devel-1.8.6p7-23.el7_3
Fixes 1 record
Priority LOW 36
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution.
CVSS 3.0HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00573 · Published 2017-06-05 · Fixed CWE-20
