The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3304-1 advisory.

    It was discovered that Sudo did not properly parse the contents of /proc/[pid]/stat when attempting to     determine its controlling tty. A local attacker in some configurations could possibly use this to     overwrite any file on the filesystem, bypassing intended permissions.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es) :

* A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root. (CVE-2017-1000367)

Red Hat would like to thank Qualys Security for reporting this issue.

- update to 1.8.20p2

  - added sudo package to dnf/yum protected packages

----

  - update to 1.8.20p1

  - fixes CVE-2017-1000367

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sudo fixes the following issues :

  - CVE-2017-1000368: A follow-up fix to CVE-2017-1000367,     the Linux process name could also contain a newline,     which could be used to trick sudo to read/write to an     arbitrary open terminal. (bsc#1042146) Also the     following non security bug was fixed :

  - Link the 'system_group' plugin with sudo_util library to     resolve the missing sudo_dso_findsym symbol     (bsc#1034560)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sudo fixes the following security issue :

  - CVE-2017-1000368: A follow-up fix to CVE-2017-1000367,     the Linux process name could also contain a newline,     which could be used to trick sudo to read/write to an     arbitrary open terminal. (bsc#1042146)

Also the following non security bug was fixed :

  - Link the 'system_group' plugin with sudo_util library to     resolve the missing sudo_dso_findsym symbol     (bsc#1034560)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

An update of the sudo package has been released.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
100549	Ubuntu 14.04 LTS / 16.04 LTS : Sudo vulnerability (USN-3304-1)	Nessus	Ubuntu Local Security Checks	2017/5/31	2025/12/17	medium
100558	CentOS 6 / 7 : sudo (CESA-2017:1382)	Nessus	CentOS Local Security Checks	2017/6/1	2025/12/17	medium
100705	Fedora 24 : sudo (2017-facd994774)	Nessus	Fedora Local Security Checks	2017/6/9	2025/12/16	medium
100953	SUSE SLES12 Security Update : sudo (SUSE-SU-2017:1627-1)	Nessus	SuSE Local Security Checks	2017/6/21	2025/12/15	high
101137	openSUSE Security Update : sudo (openSUSE-2017-744)	Nessus	SuSE Local Security Checks	2017/6/30	2025/12/15	high
121703	Photon OS 1.0: Sudo PHSA-2017-0021	Nessus	PhotonOS Local Security Checks	2019/2/7	2024/7/23	high

检测

插件搜索

medium

medium

medium

high

high

high