Privilege escalation in Sudo - CVE-2017-1000368

Vulnerability identifier: #VU7193

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-1000368

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to improper input validation in the get_process_ttyname() function when parsing tty information from the process status file in the proc files by sudo. A local attacker can supply a specially crafted file to obtain potentially sensitive information or execute arbitrary command with root privileges.

Successful exploitation of the vulnerability may result in system compromise.

Sudo
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux for x86_64
SUSE Linux
sudo (Alpine package)
sudo (Ubuntu package)

Update to version 1.8.20p2.

sudo (Alpine package) - update to 1.8.28-r0
sudo (Ubuntu package) - update to 1.8.16-0ubuntu1.6

• https://www.sudo.ws/repos/sudo/raw-rev/15a46f4007dd

• Privilege escalation in Sudo
• Red Hat update for sudo
• Gentoo update for sudo
• Amazon Linux AMI update for sudo
• OpenSUSE Linux update for sudo
• SUSE Linux update for sudo
• SUSE Linux update for sudo
• SUSE Linux update for sudo
• Ubuntu update for Sudo
• Privilege escalation in sudo (Alpine package)