Summary
[1.8.6p3-28]
- Fixes CVE-2017-1000367
Resolves: rhbz#1455399
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | sudo | 0:1.8.6p7-22.el7_3 |
| Oracle Linux · 7 | sudo-devel | 0:1.8.6p7-22.el7_3 |
Vulnerabilities 1
-
Unscored —CVE-2017-1000367 Public exploit
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process…