CVE-2017-1000367
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in...
- Published
- Jun 5, 2017
- Updated
- Aug 5, 2024
- Assigning CNA
- mitre
- Evidence observed
- Jun 14, 2017
Primary CVSS
nvd · CVSS 2.0
AV:L/AC:M/Au:N/C:C/I:C/A:CLow · next 30 days
- Percentile
- 94.0%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
Sources
7Proof-of-concept exploit for CVE-2017-1000367, a local privilege escalation vulnerability in Sudo's get_process_ttyname() on Linux, allowing overwrite of any file via tty device number manipulation.
- sudo-CVE-2017-1000367Exploit
Exploit for CVE-2017-1000367: local privilege escalation via sudo's SELinux role bypass on selinux-enabled systems. Requires sudo permissions and selinux support.
- CVE-2017-1000367Exploit
Exploit for CVE-2017-1000367, a local privilege escalation vulnerability in Sudo's get_process_ttyname() function on Linux systems.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.