vulnerability
Amazon Linux AMI 2: CVE-2017-1000368: Security patch for sudo (ALAS-2019-1315)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Jun 5, 2017 | Apr 27, 2020 | Apr 25, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Jun 5, 2017
Added
Apr 27, 2020
Modified
Apr 25, 2025
Description
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_process_ttyname() function resulting in information disclosure and command execution.
Solution(s)
amazon-linux-ami-2-upgrade-sudoamazon-linux-ami-2-upgrade-sudo-debuginfoamazon-linux-ami-2-upgrade-sudo-devel
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.