Todd Miller Sudo 漏洞

版本

1.6	18
1.6.1	14
1.6.2	14
1.6.3	14
1.6.3 P7	12

修正

Official Fix	26
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	10

易受攻击性

High	2
Functional	0
Proof-of-Concept	18
Unproven	2
Not Defined	14

访问向量

Not Defined	0
Physical	0
Local	32
Adjacent	4
Network	0

身份验证

Not Defined	0
High	0
Low	4
None	32

用户交互

Not Defined	0
Required	0
None	36

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	8
≤7	2
≤8	8
≤9	14
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	10
≤7	6
≤8	14
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	8
≤7	2
≤8	8
≤9	14
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	2
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

供应商

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

零日攻击

<1k	0
<2k	2
<5k	0
<10k	8
<25k	26
<50k	0
<100k	0
≥100k	0

本日攻击

<1k	30
<2k	6
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (107): 1.0, 1.1, 1.2, 1.3, 1.3.1, 1.4, 1.5, 1.5.2, 1.5.3, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.6, 1.6.1, 1.6.2, 1.6.2p3, 1.6.3, 1.6.3 P1, 1.6.3 P2, 1.6.3 P3, 1.6.3 P4, 1.6.3 P5, 1.6.3 P6, 1.6.3 P7, 1.6.3p1, 1.6.3p2, 1.6.3p3, 1.6.3p4, 1.6.3p5, 1.6.3p6, 1.6.3p7, 1.6.4, 1.6.4 P1, 1.6.4 P2, 1.6.4p1, 1.6.4p2, 1.6.5, 1.6.5 P1, 1.6.5 P2, 1.6.5p1, 1.6.5p2, 1.6.6, 1.6.7, 1.6.7 P5, 1.6.7p5, 1.6.8, 1.6.8 P1, 1.6.8 P2, 1.6.8 P5, 1.6.8 P7, 1.6.8 P8, 1.6.8 P9, 1.6.8 P12, 1.6.8p7, 1.6.8p12, 1.6.9, 1.6.9 P2, 1.6.9 P17, 1.6.9 P18, 1.6.9 P19, 1.6.9 P21, 1.6.9 P22, 1.6.9p2, 1.6.9p21, 1.6.9p22, 1.6.9p23, 1.7, 1.7.1, 1.7.2, 1.7.2p1, 1.7.2p2, 1.7.2p3, 1.7.2p4, 1.7.2p5, 1.7.2p6, 1.7.2p7, 1.7.3b1, 1.7.4, 1.7.4p1, 1.7.4p2, 1.7.4p3, 1.7.4p4, 1.8, 1.8.1, 1.8.1p1, 1.8.1p2, 1.8.2, 1.8.3, 1.8.3p1, 1.8.4, 1.8.5, 1.8.6, 1.8.6p6, 1.8.7, 1.8.8, 1.8.9, 1.8.11, 1.8.12, 1.8.13, 1.8.14, 1.8.15, 1.8.16, 1.8.17, 1.8.18, 1.8.19, 1.8.20p1

软件类型: Operating System Utility Software

已发布	Base	Temp	漏洞	0day	今天	易	修正	CTI	CVE
2017-06-05	6.9	6.8	Todd Miller sudo Newline get_process_ttyname 权限升级	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2017-1000368
2017-05-30	7.1	6.4	Todd Miller sudo TTY get_process_ttyname 竞争条件	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	CVE-2017-1000367
2017-04-14	6.1	5.9	Todd Miller sudo sudo_noexec.so popen 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-7032
2016-12-22	4.3	4.3	Todd Miller sudo readline 信息公开	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2016-7091
2015-07-28	7.8	7.0	Todd Miller sudo sudoedit sudoers 权限升级	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.05	CVE-2015-5602
2015-02-22	4.6	4.3	Todd Miller sudo TZ Parser 信息公开	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2014-9680
2014-03-05	5.9	5.2	Todd Miller sudo env.c validate_env_vars 权限升级	$5k-$25k	$0-$5k	Unproven	Official Fix	0.04	CVE-2014-0106
2013-04-08	5.9	5.7	Todd Miller sudo File Descriptors 权限升级	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2013-2777
2013-04-08	5.9	5.9	Todd Miller sudo File Descriptors proc sysctl 权限升级	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2013-2776
2013-02-27	5.3	5.1	Todd Miller sudo Authentication 权限升级	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2013-1775

26 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 26 results.

更多条目由 Todd Miller

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!