Lucene search
F5F5:K23151384HistoryJun 13, 2017 - 12:00 a.m.
K23151384 : Sudo vulnerabilities CVE-2017-1000367 and CVE-2017-1000368
2017-06-1300:00:00
my.f5.com
40
Security Advisory Description
Todd Miller’s sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
Todd Miller’s sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution.
Impact
There is no impact; F5 products are not affected by this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
nessus
nessus
openSUSE Security Update : sudo (openSUSE-2017-744)
2017-06-30 00:00:00
SUSE SLES12 Security Update : sudo (SUSE-SU-2017:1627-1)
2017-06-21 00:00:00
EulerOS 2.0 SP1 : sudo (EulerOS-SA-2017-1120)
2017-07-10 00:00:00
amazon
amazon
redhatcve
redhatcve
CVE-2017-1000368
2017-06-06 12:49:37
CVE-2017-1000367
2017-05-30 15:48:50
redhat
redhat
(RHSA-2017:1574) Moderate: sudo security update
2017-06-22 17:25:15
(RHSA-2017:1382) Important: sudo security update
2017-05-30 15:55:46
(RHSA-2017:1381) Important: sudo security update
2017-05-30 00:00:00
ibm
ibm
openvas
openvas
CentOS Update for sudo CESA-2017:1574 centos6
2017-06-23 00:00:00
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2020-1989)
2020-09-08 00:00:00
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2017-1120)
2020-01-23 00:00:00
debian
debian
[SECURITY] [DLA 1011-1] sudo security update
2017-07-03 15:30:21
[SECURITY] [DLA 970-1] sudo security update
2017-05-30 23:41:12
[SECURITY] [DSA 3867-1] sudo security update
2017-05-30 15:37:59
centos
centos
sudo security update
2017-06-22 20:51:03
sudo security update
2017-05-31 14:06:33
suse
suse
Security update for sudo (important)
2017-06-20 18:10:44
Security update for sudo (important)
2017-06-20 18:10:00
Security update for sudo (important)
2017-06-27 00:09:23
cve
cve
CVE-2017-1000368
2017-06-05 16:29:00
CVE-2017-1000367
2017-06-05 14:29:00
osv
osv
sudo - security update
2017-07-03 00:00:00
CVE-2017-1000368
2017-06-05 16:29:00
CVE-2017-1000367
2017-06-05 14:29:00
cvelist
cvelist
CVE-2017-1000368
2017-06-05 16:00:00
CVE-2017-1000367
2017-06-05 00:00:00
oraclelinux
oraclelinux
sudo security update
2017-06-23 00:00:00
sudo security update
2017-06-01 00:00:00
sudo security update
2017-05-30 00:00:00
prion
prion
Design/Logic Flaw
2017-06-05 16:29:00
Design/Logic Flaw
2017-06-05 14:29:00
gentoo
gentoo
sudo: Privilege escalation
2017-10-08 00:00:00
sudo: Privilege escalation
2017-05-30 00:00:00
ubuntucve
ubuntucve
CVE-2017-1000368
2017-06-05 00:00:00
CVE-2017-1000367
2017-05-30 00:00:00
debiancve
debiancve
CVE-2017-1000368
2017-06-05 16:29:00
CVE-2017-1000367
2017-06-05 14:29:00
nvd
nvd
CVE-2017-1000368
2017-06-05 16:29:00
CVE-2017-1000367
2017-06-05 14:29:00
ubuntu
ubuntu
Sudo vulnerability
2019-05-29 00:00:00
Sudo vulnerability
2017-05-30 00:00:00
Sudo vulnerabilities
2019-05-06 00:00:00
veracode
veracode
Arbitrary Command Execution
2019-01-15 09:18:06
Privilege Escalation
2019-01-15 09:17:30
alpinelinux
alpinelinux
CVE-2017-1000368
2017-06-05 16:29:00
f5
f5
sudo vulnerability CVE-2017-1000367
2017-06-13 21:52:00
archlinux
archlinux
[ASA-201705-25] sudo: access restriction bypass
2017-05-30 00:00:00
thn
thn
High-Severity Linux Sudo Flaw Allows Users to Gain Root Privileges
2017-05-31 21:28:00
exploitpack
exploitpack
Sudo 1.8.20 - get_process_ttyname() Local Privilege Escalation
2017-06-14 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: sudo-1.8.20p2-1.fc25
2017-06-03 02:37:39
[SECURITY] Fedora 24 Update: sudo-1.8.20p2-1.fc24
2017-06-08 06:53:51
[SECURITY] Fedora 26 Update: sudo-1.8.20p2-1.fc26
2017-06-09 20:21:45
mageia
mageia
Updated sudo packages fix security vulnerability
2017-07-13 12:10:46
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.8.20p1-alt1
2017-05-31 00:00:00
seebug
seebug
CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux
2017-05-31 00:00:00
slackware
slackware
[slackware-security] sudo
2017-05-30 17:42:26
packetstorm
packetstorm
Sudo get_process_ttyname() Race Condition
2017-06-02 00:00:00
cloudfoundry
cloudfoundry
USN-3304-1: Sudo vulnerability | Cloud Foundry
2017-06-12 00:00:00
USN-3968-1: Sudo vulnerabilities | Cloud Foundry
2019-05-20 00:00:00
threatpost
threatpost
Patches Available for Linux Sudo Vulnerability
2017-05-31 13:55:30
exploitdb
exploitdb
Sudo 1.8.20 - 'get_process_ttyname()' Local Privilege Escalation
2017-06-14 00:00:00
myhack58
myhack58
photon
photon
qualysblog
qualysblog
The Stack Clash
2017-06-19 15:14:57
kitploit
kitploit