Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2017-1000367

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution.

CVSS 6.4 · MediumBuzz score 34.0

Buzz score

Why this CVE is surfacing

Buzz score total 34.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 19.5 · diversity 14.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
19.5
6 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
6 source links · newest first
  • Rapid7 Says ROI for Ransomware Remains High; Zero-Day Usage ExpandsSecurityWeek

    A new report from Rapid7 says a ransomware gang like Cl0p would easily be able to afford a bevy of zero-day exploits for vulnerable enterprise software.

    newswww.securityweek.comAug 17, 2023, 3:30 PM
  • 5 things you need to know about Stack Clash to secure your shared Linux environmentCSO Online

    The Stack Clash vulnerability in Linux, Solaris and BSD-based systems would let attackers gain root privileges and take full control of the machine, Qualys researchers warned Monday. Hosting providers and administrators of shared environments need to pay particular attention to this flaw since one compromised user can result in all other users on the same server […]

    newswww.csoonline.comJun 20, 2017, 10:54 PM
  • 2017-6-5 Global Cyber Attack ReportsCheck Point Research

    TOP ATTACKS AND BREACHES A new publication written by Check Point researchers describes Fireball, a malware targeting web browsers and hijacking them for monetizing purposes. The malware, which is estimated to have infected over 250 million devices and over 20% of all networks worldwide, conducts changes in the browser such as changing the default […]

    vendorresearch.checkpoint.comJun 5, 2017, 10:49 PM
  • A week in security (May 29 – Jun 04)Malwarebytes Labs

    Last week, we looked at a ransomware strain that appears to be a fake version of DMA Locker. We also focused on…

    newswww.malwarebytes.comJun 4, 2017, 5:00 PM
  • A recently discovered Linux flaw could be exploited by Sudo Users to gain Root PrivilegesSecurity Affairs

    Security researchers at Qualys Security have discovered a Linux Flaw that could be exploited to escalate privileges and overwrite any file on the filesystem. Security researchers at Qualys Security have discovered a Linux flaw that could be exploited to gain root privileges and overwrite any file on the filesystem on SELinux-enabled systems. The high severity flaw, tracked […]

    newssecurityaffairs.comMay 31, 2017, 9:03 PM
  • Linux Flaw Allows Sudo Users to Gain Root PrivilegesSecurityWeek

    A vulnerability affecting the manner in which Sudo parsed tty information could have resulted in the user gaining root privileges and being able to overwrite any file on the filesystem on SELinux-enabled systems.

    newswww.securityweek.comMay 31, 2017, 5:31 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2019-18684

    Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo process. This occurs because of a race condition between dete…

    CVSS 7.0 · High
  • CVE-2015-8239

    The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.

    CVSS 7.0 · High
  • CVE-2026-62436

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introduction of Grant Table v2 came the…

    CVSS 6.5 · Medium
    1 mention
  • CVE-2026-62435

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introduction of Grant Table v2 came the…

    CVSS 6.5 · Medium
    1 mention
  • CVE-2026-62432

    The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOP_reset, resulting in derefe…

    CVSS 7.3 · High
    3 mentions
  • CVE-2026-62430

    Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take…

    CVSS 7.5 · High
    3 mentions