sudo before version 1.8.18p1 is vulnerable to a bypass in...
Vulnerability Description
sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-7076
Credits & Attribution
No credits recorded in the NVD database.
References
- https://www.sudo.ws/alerts/noexec_wordexp.html
- http://rhn.redhat.com/errata/RHSA-2016-2872.html
- http://www.securityfocus.com/bid/95778
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7076
- https://security.netapp.com/advisory/ntap-20181127-0002/
- https://usn.ubuntu.com/3968-1/
- https://usn.ubuntu.com/3968-3/
More from [UNKNOWN]
View All →Affected Vendor
[UNKNOWN]
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.