cbcvebase.
CVE-2016-7032
published 2017-04-14

CVE-2016-7032: sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1)…

high7CVSS 3.0
AVLACHPRLUINSUCHIHAH
sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.

Affected

34 ranges· showing 25
VendorProductVersion rangeFixed in
debiansudo< sudo 1.8.15-1 (bookworm)sudo 1.8.15-1 (bookworm)
sudo_projectsudo>= 0 < 1.8.15-11.8.15-1
sudo_projectsudo>= 0 < 1.8.15-11.8.15-1
sudo_projectsudo>= 0 < 1.8.15-11.8.15-1
sudo_projectsudo>= 0 < 1.8.15-11.8.15-1
sudo_projectsudo>= 0 < 1.8.9p5-1ubuntu1.5+esm51.8.9p5-1ubuntu1.5+esm5
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo
todd_millersudo

CVSS provenance

nvdv3.07.0HIGHCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.0HIGH