CVE-2016-7032
Fixed in a distro release EPSS <1%
sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.
Products: todd_miller sudo
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sudo | 1.8.15-1 |
| Debian 13 | sudo | 1.8.15-1 |
| Debian 14 | sudo | 1.8.15-1 |
| Debian 7 | sudo | 1.8.5p2-1+nmu3+deb7u2 |
| Red Hat Enterprise Linux 6 | sudo | 0:1.8.6p3-25.el6_8 |
| Red Hat Enterprise Linux 6 | sudo-debuginfo | 0:1.8.6p3-25.el6_8 |
| Red Hat Enterprise Linux 6 | sudo-devel | 0:1.8.6p3-25.el6_8 |
| Red Hat Enterprise Linux 7 | sudo | 0:1.8.6p7-21.el7_3 |
| Red Hat Enterprise Linux 7 | sudo-debuginfo | 0:1.8.6p7-21.el7_3 |
| Red Hat Enterprise Linux 7 | sudo-devel | 0:1.8.6p7-21.el7_3 |
| SUSE Linux Enterprise Desktop 12 SP1 | sudo | 1.8.10p3-2.6.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | sudo | 1.8.10p3-8.1 |
| SUSE Linux Enterprise Server 11 SP4 | sudo | 1.7.6p2-0.29.1 |
| SUSE Linux Enterprise Server 12 SP1 | sudo | 1.8.10p3-2.6.1 |
| SUSE Linux Enterprise Server 12 SP2 | sudo | 1.8.10p3-8.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | sudo | 1.8.10p3-8.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | sudo | 1.7.6p2-0.29.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | sudo | 1.8.10p3-2.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | sudo | 1.8.10p3-8.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | sudo | 1.8.10p3-2.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | sudo | 1.8.10p3-8.1 |
| Ubuntu Pro 14.04 LTS | sudo | 1.8.9p5-1ubuntu1.5+esm5 |
| openSUSE Tumbleweed | sudo | 1.9.7p2-1.4 |