Описание
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 1.8.20p2-1ubuntu1 |
| esm-infra-legacy/trusty | released | 1.8.9p5-1ubuntu1.4 |
| esm-infra/xenial | released | 1.8.16-0ubuntu1.4 |
| precise/esm | not-affected | code not present |
| trusty | released | 1.8.9p5-1ubuntu1.4 |
| trusty/esm | released | 1.8.9p5-1ubuntu1.4 |
| upstream | needs-triage | |
| vivid/stable-phone-overlay | ignored | end of life |
| vivid/ubuntu-core | released | 1.8.9p5-1ubuntu5.1 |
| xenial | released | 1.8.16-0ubuntu1.4 |
Показывать по
6.9 Medium
CVSS2
6.4 Medium
CVSS3
Связанные уязвимости
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an inpu ...
6.9 Medium
CVSS2
6.4 Medium
CVSS3