Todd Miller 漏洞

时间轴

类型

Operating System Utility Software36

产品

Todd Miller sudo34
Todd Miller Sudo2

修正

Official Fix26
Temporary Fix0
Workaround0
Unavailable0
Not Defined10

易受攻击性

High0
Functional0
Proof-of-Concept14
Unproven2
Not Defined20

访问向量

Not Defined0
Physical0
Local34
Adjacent2
Network0

身份验证

Not Defined0
High2
Low4
None30

用户交互

Not Defined0
Required0
None36

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤54
≤64
≤76
≤82
≤912
≤104

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤54
≤68
≤74
≤810
≤96
≤100

VulDB

≤10
≤20
≤30
≤44
≤52
≤610
≤72
≤82
≤912
≤104

NVD

≤10
≤20
≤30
≤42
≤50
≤60
≤72
≤80
≤92
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k2
<5k2
<10k10
<25k22
<50k0
<100k0
≥100k0

本日攻击

<1k32
<2k2
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (2): Sudo (1), sudo (35)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2017-06-056.96.8Todd Miller sudo Newline get_process_ttyname 权限升级Operating System Utility SoftwareNot DefinedOfficial Fix0.000650.00CVE-2017-1000368
2017-05-307.16.4Todd Miller sudo TTY get_process_ttyname 竞争条件Operating System Utility SoftwareProof-of-ConceptOfficial Fix0.002050.00CVE-2017-1000367
2017-04-146.15.9Todd Miller sudo sudo_noexec.so popen 权限升级Operating System Utility SoftwareNot DefinedOfficial Fix0.000420.00CVE-2016-7032
2016-12-224.34.3Todd Miller sudo readline 信息公开Operating System Utility SoftwareNot DefinedNot Defined0.000420.00CVE-2016-7091
2015-07-287.87.0Todd Miller sudo sudoedit sudoers 权限升级Operating System Utility SoftwareProof-of-ConceptOfficial Fix0.000610.00CVE-2015-5602
2015-02-224.64.3Todd Miller sudo TZ Parser 信息公开Operating System Utility SoftwareUnprovenOfficial Fix0.000420.02CVE-2014-9680
2014-03-055.95.2Todd Miller sudo env.c validate_env_vars 权限升级Operating System Utility SoftwareUnprovenOfficial Fix0.000420.00CVE-2014-0106
2013-04-085.95.7Todd Miller sudo File Descriptors 权限升级Operating System Utility SoftwareNot DefinedOfficial Fix0.000440.00CVE-2013-2777
2013-04-085.95.9Todd Miller sudo File Descriptors proc sysctl 权限升级Operating System Utility SoftwareNot DefinedNot Defined0.000440.00CVE-2013-2776
2013-02-275.35.1Todd Miller sudo Authentication 权限升级Operating System Utility SoftwareHighOfficial Fix0.000440.02CVE-2013-1775

26 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 26 results.

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!