Todd Miller Sudo Уязвимости

Версия

1.6.8	14
1.6.1	12
1.6.2	12
1.6.3	12
1.6.4	12

Устранение последствий

Official Fix	22
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	14

Эксплуатационная пригодность

High	0
Functional	0
Proof-of-Concept	18
Unproven	2
Not Defined	16

Вектор доступа

Not Defined	0
Physical	0
Local	30
Adjacent	6
Network	0

Аутентификация

Not Defined	0
High	0
Low	6
None	30

Взаимодействие с пользователем

Not Defined	0
Required	0
None	36

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	8
≤7	6
≤8	6
≤9	12
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	14
≤7	6
≤8	8
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	10
≤7	4
≤8	6
≤9	12
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	4
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Поставщик

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Эксплойт 0-дня

<1k	0
<2k	2
<5k	2
<10k	6
<25k	26
<50k	0
<100k	0
≥100k	0

Эксплойт сегодня

<1k	24
<2k	6
<5k	6
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (107): 1.0, 1.1, 1.2, 1.3, 1.3.1, 1.4, 1.5, 1.5.2, 1.5.3, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.6, 1.6.1, 1.6.2, 1.6.2p3, 1.6.3, 1.6.3 P1, 1.6.3 P2, 1.6.3 P3, 1.6.3 P4, 1.6.3 P5, 1.6.3 P6, 1.6.3 P7, 1.6.3p1, 1.6.3p2, 1.6.3p3, 1.6.3p4, 1.6.3p5, 1.6.3p6, 1.6.3p7, 1.6.4, 1.6.4 P1, 1.6.4 P2, 1.6.4p1, 1.6.4p2, 1.6.5, 1.6.5 P1, 1.6.5 P2, 1.6.5p1, 1.6.5p2, 1.6.6, 1.6.7, 1.6.7 P5, 1.6.7p5, 1.6.8, 1.6.8 P1, 1.6.8 P2, 1.6.8 P5, 1.6.8 P7, 1.6.8 P8, 1.6.8 P9, 1.6.8 P12, 1.6.8p7, 1.6.8p12, 1.6.9, 1.6.9 P2, 1.6.9 P17, 1.6.9 P18, 1.6.9 P19, 1.6.9 P21, 1.6.9 P22, 1.6.9p2, 1.6.9p21, 1.6.9p22, 1.6.9p23, 1.7, 1.7.1, 1.7.2, 1.7.2p1, 1.7.2p2, 1.7.2p3, 1.7.2p4, 1.7.2p5, 1.7.2p6, 1.7.2p7, 1.7.3b1, 1.7.4, 1.7.4p1, 1.7.4p2, 1.7.4p3, 1.7.4p4, 1.8, 1.8.1, 1.8.1p1, 1.8.1p2, 1.8.2, 1.8.3, 1.8.3p1, 1.8.4, 1.8.5, 1.8.6, 1.8.6p6, 1.8.7, 1.8.8, 1.8.9, 1.8.11, 1.8.12, 1.8.13, 1.8.14, 1.8.15, 1.8.16, 1.8.17, 1.8.18, 1.8.19, 1.8.20p1

Тип программного обеспечения: Operating System Utility Software

Опубликовано	Base	Temp	Уязвимости	0day	Сегодня	Э�	Rem	CTI	CVE
05.06.2017	6.9	6.8	Todd Miller sudo Newline get_process_ttyname эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-1000368
30.05.2017	7.1	6.4	Todd Miller sudo TTY get_process_ttyname состояние гонки	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2017-1000367
14.04.2017	6.1	5.9	Todd Miller sudo sudo_noexec.so popen эскалация привилегий	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-7032
22.12.2016	4.3	4.3	Todd Miller sudo readline раскрытие информации	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-7091
28.07.2015	7.8	7.0	Todd Miller sudo sudoedit sudoers эскалация привилегий	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2015-5602
22.02.2015	4.6	4.3	Todd Miller sudo TZ Parser раскрытие информации	$5k-$25k	$0-$5k	Unproven	Official Fix	0.02	CVE-2014-9680
05.03.2014	5.9	5.2	Todd Miller sudo env.c validate_env_vars эскалация привилегий	$5k-$25k	$0-$5k	Unproven	Official Fix	0.02	CVE-2014-0106
08.04.2013	5.9	5.7	Todd Miller sudo File Descriptors эскалация привилегий	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-2777
08.04.2013	5.9	5.9	Todd Miller sudo File Descriptors proc sysctl эскалация привилегий	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2013-2776
27.02.2013	5.3	5.1	Todd Miller sudo Authentication эскалация привилегий	$5k-$25k	$0-$5k	High	Official Fix	0.02	CVE-2013-1775