CVE-2017-1000368

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-1000368

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000368.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-1000368

Related

Published

2017-06-05T16:29:00Z

Modified

2024-09-18T02:19:30.183812Z

Severity

8.2 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the getprocessttyname() function resulting in information disclosure and command execution.

References

Affected packages

Alpine:v3.10 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Alpine:v3.11 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Alpine:v3.12 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Alpine:v3.13 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Alpine:v3.14 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Alpine:v3.15 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Alpine:v3.7 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Alpine:v3.8 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Alpine:v3.9 / sudo

Package

Name: sudo
Purl: pkg:apk/alpine/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20_p2-r0

Affected versions

1.*

1.6.9_p17-r1

1.7.0-r0

1.7.1-r0

1.7.2-r0

1.7.2_p1-r0

1.7.2_p2-r0

1.7.2_p4-r0

1.7.2_p5-r0

1.7.2_p6-r0

1.7.2_p6-r1

1.7.2_p7-r0

1.7.3-r0

1.7.4_p2-r0

1.7.4_p3-r0

1.7.4_p4-r0

1.7.4_p5-r0

1.7.4p6-r0

1.8.0-r0

1.8.0-r1

1.8.1-r0

1.8.1p1-r0

1.8.2-r0

1.8.3-r0

1.8.3_p1-r0

1.8.3_p2-r0

1.8.3_p2-r1

1.8.4-r0

1.8.4_p1-r0

1.8.4_p2-r0

1.8.4_p4-r0

1.8.5_p1-r0

1.8.5_p2-r0

1.8.5_p3-r0

1.8.6-r0

1.8.6_p1-r0

1.8.6_p3-r0

1.8.6_p4-r0

1.8.6_p5-r0

1.8.6_p6-r0

1.8.6_p7-r0

1.8.6_p8-r0

1.8.7-r0

1.8.8-r0

1.8.9_p4-r0

1.8.9_p5-r0

1.8.10-r0

1.8.10_p1-r0

1.8.10_p2-r0

1.8.10_p3-r0

1.8.11_p2-r0

1.8.12-r0

1.8.13-r0

1.8.14_p3-r0

1.8.14_p3-r1

1.8.15-r0

1.8.15-r1

1.8.16-r0

1.8.17-r0

1.8.17_p1-r0

1.8.18-r0

1.8.18_p1-r0

1.8.19_p1-r0

1.8.19_p2-r0

1.8.20_p1-r0

Debian:11 / sudo

Package

Name: sudo
Purl: pkg:deb/debian/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20p1-1.1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / sudo

Package

Name: sudo
Purl: pkg:deb/debian/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20p1-1.1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / sudo

Package

Name: sudo
Purl: pkg:deb/debian/sudo?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.20p1-1.1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/millert/sudo

Affected ranges

Type: GIT
Repo: https://github.com/millert/sudo
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

2d7fd01eab5a24847600e347300806df810dcdf3

Last affected

54a5f94e07d7f6c69750d181f06d74f49d0663d1

Affected versions

Other

SUDO_1_3_0

SUDO_1_3_1

SUDO_1_4_0

SUDO_1_5_0

SUDO_1_5_1

SUDO_1_5_2

SUDO_1_5_3

SUDO_1_5_4

SUDO_1_5_6

SUDO_1_5_7

SUDO_1_5_8

SUDO_1_5_9

SUDO_1_6_0

SUDO_1_6_1

SUDO_1_6_2

SUDO_1_6_3

SUDO_1_6_4

SUDO_1_6_5

SUDO_1_6_6

SUDO_1_6_7

SUDO_1_6_8

SUDO_1_6_8p1

SUDO_1_7_0

SUDO_1_7_1

SUDO_1_7_2

SUDO_1_8_0

SUDO_1_8_1

SUDO_1_8_10

SUDO_1_8_10p1

SUDO_1_8_10p2

SUDO_1_8_10p3

SUDO_1_8_11

SUDO_1_8_11p1

SUDO_1_8_11p2

SUDO_1_8_12

SUDO_1_8_13

SUDO_1_8_14

SUDO_1_8_14p1

SUDO_1_8_14p3

SUDO_1_8_15

SUDO_1_8_16

SUDO_1_8_17

SUDO_1_8_17p1

SUDO_1_8_18

SUDO_1_8_18p1

SUDO_1_8_19

SUDO_1_8_19p1

SUDO_1_8_19p2

SUDO_1_8_2

SUDO_1_8_20

SUDO_1_8_20p1

SUDO_1_8_3

SUDO_1_8_4

SUDO_1_8_4p1

SUDO_1_8_4p2

SUDO_1_8_4p3

SUDO_1_8_4p4

SUDO_1_8_4p5

SUDO_1_8_5

SUDO_1_8_5p1

SUDO_1_8_5p2

SUDO_1_8_5p3

SUDO_1_8_6

SUDO_1_8_6p1

SUDO_1_8_6p2

SUDO_1_8_6p3

SUDO_1_8_6p4

SUDO_1_8_6p5

SUDO_1_8_6p6

SUDO_1_8_6p7

SUDO_1_8_6p8

SUDO_1_8_7

SUDO_1_8_8

SUDO_1_8_9

SUDO_1_8_9p1

SUDO_1_8_9p2

SUDO_1_8_9p3

SUDO_1_8_9p4

SUDO_1_8_9p5