PT-2017-2230 · Sudo+5 · Sudo+5

Stephane Chazelas · Published 2017-06-02 · Updated 2024-06-15 · CVE-2017-1000368

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions sudo versions 1.8.20p1 and earlier

Description The issue is related to insufficient input validation, specifically embedded newlines, in the get process ttyname() function. This can result in information disclosure and command execution. A remote attacker may exploit this to execute arbitrary commands and gain access to information.

Recommendations For sudo versions 1.8.20p1 and earlier, consider restricting access to the get process ttyname() function until a patch is available. As a temporary workaround, limit the execution of commands that utilize this function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-1686

BDU:2017-01424

CESA-2017_1574

CVE-2017-1000368

DLA-1011-1

OPENSUSE-SU-2017_1697-1

OPENSUSE-SU-2024:11413-1

RHSA-2017:1574

RHSA-2017_1574

SUSE-SU-2017:1626-1

SUSE-SU-2017:1627-1

SUSE-SU-2017:1771-1

SUSE-SU-2017:1778-1

SUSE-SU-2017_1771-1

SUSE-SU-2017_1778-1

USN-3968-1

USN-3968-2

Affected Products

Alt Linux

Centos

Red Hat

Suse

Ubuntu

Sudo

References · 75

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/c0d3z3r0/sudo-CVE-2017-1000367 · Exploit
• 🔥 https://github.com/pucerpocok/sudo_exploit · Exploit
• https://errata.altlinux.org/ALT-PU-2017-1686 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3968-2 · Vendor Advisory
• https://sudo.ws/alerts/linux_tty.html · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2017-1000368 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01283 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2017:1778-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000368 · Security Note
• https://usn.ubuntu.com/3968-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7076 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-1000368 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-1000368 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-1000368 · Vendor Advisory