0daybank资讯网 www.0daybank.org 发布时间:2017年06月13日下午11:01

漏洞类别:Amazon Linux

漏洞等级:

漏洞信息

A flaw was found in the way sudo parsed tty information from the process
status file in the proc filesystem. A local user with privileges to execute
commands via sudo could use this flaw to escalate their privileges to root.
(CVE-2017-1000367 )

漏洞危害

Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.

解决方案

Please refer to Amazon advisory ALAS-2017-843 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

ALAS-2017-843: Amazon Linux (sudo (1.8.6p3-28.25.amzn1) on i686)

ALAS-2017-843: Amazon Linux (sudo (1.8.6p3-28.25.amzn1) on x86_64)

ALAS-2017-843: Amazon Linux (sudo (1.8.6p3-28.25.amzn1) on src)

发表评论