Skip to content
OpenAdvisories
Unscored RHSA-2017:1382 1 CVE

Red Hat Security Advisory: sudo security update

Published Sep 13, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 24

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client sudo 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::client sudo-debuginfo 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::client sudo-devel 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::computenode sudo 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::computenode sudo-debuginfo 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::computenode sudo-devel 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server sudo 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server sudo-debuginfo 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server sudo-devel 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation sudo 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation sudo-debuginfo 0:1.8.6p3-28.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation sudo-devel 0:1.8.6p3-28.el6_9
Red Hat · RHEL 7 enterprise_linux:7::client sudo 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::client sudo-debuginfo 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::client sudo-devel 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::computenode sudo 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::computenode sudo-debuginfo 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::computenode sudo-devel 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server sudo 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server sudo-debuginfo 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server sudo-devel 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::workstation sudo 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::workstation sudo-debuginfo 0:1.8.6p7-22.el7_3
Red Hat · RHEL 7 enterprise_linux:7::workstation sudo-devel 0:1.8.6p7-22.el7_3

Vulnerabilities 1

  • Unscored —
    CVE-2017-1000367 Public exploit

    Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process…

    sudo sudo Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1453074
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1382.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-1000367
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-1000367
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-1000367
  • article
    https://access.redhat.com/security/vulnerabilities/3059071
  • article
    https://www.sudo.ws/alerts/linux_tty.html