CVE-2017-1000367 漏洞信息：Amazon Linux Security Advisory for sudo: ALAS-2017-843

A flaw was found in the way sudo parsed tty information from the process
status file in the proc filesystem. A local user with privileges to execute
commands via sudo could use this flaw to escalate their privileges to root.
(CVE-2017-1000367 )

Allows unauthorized disclosure of information; allows unauthorized modification; allows disruption of service.

Please refer to Amazon advisory ALAS-2017-843 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

ALAS-2017-843: Amazon Linux (sudo (1.8.6p3-28.25.amzn1) on i686)

ALAS-2017-843: Amazon Linux (sudo (1.8.6p3-28.25.amzn1) on x86_64)

ALAS-2017-843: Amazon Linux (sudo (1.8.6p3-28.25.amzn1) on src)