CVE-2017-1000367

Severity: medium (CVSS 6.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-06-05 · updated 2026-06-17
Weakness: CWE-362

Description

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.

Affected products

sudo: through 1.8.20

References

http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00077.html
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00078.html
http://lists.opensuse.org/opensuse-security-announce/2017-05/msg00079.html
http://packetstormsecurity.com/files/142783/Sudo-get_process_ttyname-Race-Condition.html
http://seclists.org/fulldisclosure/2017/Jun/3
http://www.debian.org/security/2017/dsa-3867
http://www.openwall.com/lists/oss-security/2017/05/30/16
http://www.openwall.com/lists/oss-security/2022/12/22/5
http://www.openwall.com/lists/oss-security/2022/12/22/6
http://www.securityfocus.com/bid/98745
http://www.securitytracker.com/id/1038582
http://www.ubuntu.com/usn/USN-3304-1

Get alerted when CVE-2017-1000367 or the next vulnerability affects your stack