Sudo CVE-2017-1000368 Incomplete Fix Local Privilege Escalation Vulnerability

Bugtraq ID:	98838
Class:	Design Error
CVE:	CVE-2017-1000368
Remote:	No
Local:	Yes
Published:	Jun 05 2017 12:00AM
Updated:	Sep 05 2017 08:13PM
Credit:	Stephane Chazelas
Vulnerable:	Todd Miller Sudo 1.8.20 Todd Miller Sudo 1.8.19 Todd Miller Sudo 1.8.18 Todd Miller Sudo 1.8.17 Todd Miller Sudo 1.8.16 Todd Miller Sudo 1.8.11 Todd Miller Sudo 1.7.2 p7 Todd Miller Sudo 1.7.2 p6 Todd Miller Sudo 1.7.2 p5 Todd Miller Sudo 1.7.2 p4 Todd Miller Sudo 1.7.2 p3 Todd Miller Sudo 1.7.2 p1 Todd Miller Sudo 1.7 Todd Miller Sudo 1.8.6p7 Todd Miller Sudo 1.8.6p6 Todd Miller Sudo 1.8.6P5 Todd Miller Sudo 1.8.6P4 Todd Miller Sudo 1.8.6P3 Todd Miller Sudo 1.8.6P2 Todd Miller Sudo 1.8.6P1 Todd Miller Sudo 1.8.6 Todd Miller Sudo 1.8.5p3 Todd Miller Sudo 1.8.5P2 Todd Miller Sudo 1.8.5P1 Todd Miller Sudo 1.8.5 Todd Miller Sudo 1.8.20p1 Todd Miller Sudo 1.8.15 Todd Miller Sudo 1.8.14 Todd Miller Sudo 1.8.12 Todd Miller Sudo 1.7.9p1 Todd Miller Sudo 1.7.9 Todd Miller Sudo 1.7.8P2 Todd Miller Sudo 1.7.8P1 Todd Miller Sudo 1.7.8 Todd Miller Sudo 1.7.7 Todd Miller Sudo 1.7.6P2 Todd Miller Sudo 1.7.6P1 Todd Miller Sudo 1.7.6 Todd Miller Sudo 1.7.5 Todd Miller Sudo 1.7.4P6 Todd Miller Sudo 1.7.4P5 Todd Miller Sudo 1.7.4p4 Todd Miller Sudo 1.7.4p3 Todd Miller Sudo 1.7.4P2 Todd Miller Sudo 1.7.4P1 Todd Miller Sudo 1.7.4 Todd Miller Sudo 1.7.3B1 Todd Miller Sudo 1.7.2P7 Todd Miller Sudo 1.7.2p6 Todd Miller Sudo 1.7.2P5 Todd Miller Sudo 1.7.2P2 Todd Miller Sudo 1.7.2P1 Todd Miller Sudo 1.7.2 Todd Miller Sudo 1.7.10P9 Todd Miller Sudo 1.7.10P8 Todd Miller Sudo 1.7.10p7 Todd Miller Sudo 1.7.10p6 Todd Miller Sudo 1.7.10p5 Todd Miller Sudo 1.7.10P4 Todd Miller Sudo 1.7.10P3 Todd Miller Sudo 1.7.10P2 Todd Miller Sudo 1.7.10P1 Todd Miller Sudo 1.7.10 Todd Miller Sudo 1.7.1 Oracle VM Server for x86 3.4 Oracle VM Server for x86 3.3 Oracle Linux 7 Oracle Linux 6 McAfee Web Gateway 7.7 McAfee Web Gateway 7.7.2.2 McAfee Web Gateway 7.6.2.4 McAfee Web Gateway 7.6.2.3 McAfee Web Gateway 7.6.2.2 McAfee Web Gateway 7.6.2.14 McAfee Web Gateway 7.6.2.1 McAfee Web Gateway 7.6.2.0
Not Vulnerable:	Todd Miller Sudo 1.8.20p2 McAfee Web Gateway 7.7.2.3 McAfee Web Gateway 7.6.2.15

Sudo CVE-2017-1000368 Incomplete Fix Local Privilege Escalation Vulnerability

Sudo is prone to a local privilege-escalation vulnerability.

Local attackers could exploit this issue to run arbitrary commands with root privileges.

This issue is fixed in sudo 1.8.20p2.

NOTE: This issue is the result of an incomplete fix for the issue described in BID 98745 (Sudo '/src/ttyname.c' Local Privilege Escalation Vulnerability).

Sudo CVE-2017-1000368 Incomplete Fix Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sudo CVE-2017-1000368 Incomplete Fix Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Sudo CVE-2017-1000368 Incomplete Fix Local Privilege Escalation Vulnerability

References:

• Sudo Homepage (Todd Miller)
  
• Sudo Release (Sudo)
  
• Oracle Linux Bulletin - July 2017 (Oracle)
  
• Oracle VM Server for x86 Bulletin - July 2017 (Oracle)
  
• Web Gateway update fixes vulnerabilities CVE-2012-6706, CVE-2017-1000364, CVE-20 (McAfee)