CVE-2016-7032

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-7032
sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.

7.0 /10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.0 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.9 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 3.4 / Impact : 10.0

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://rhn.redhat.com/errata/RHSA-2016-2872.html
http://www.securityfocus.com/bid/95776 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1372830 Issue Tracking Third Party Advisory VDB Entry
https://usn.ubuntu.com/3968-3/
https://www.sudo.ws/alerts/noexec_bypass.html
http://rhn.redhat.com/errata/RHSA-2016-2872.html
http://www.securityfocus.com/bid/95776 Third Party Advisory VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1372830 Issue Tracking Third Party Advisory VDB Entry
https://usn.ubuntu.com/3968-3/
https://www.sudo.ws/alerts/noexec_bypass.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.6.9:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.3:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.4:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.5:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.6:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.7:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.8:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.9:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.7.10:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.1:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.2:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.3:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.4:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.5:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.6:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.7:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.8:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.9:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.10:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.11:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.12:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.13:*:*:*:*:*:*:*
cpe:2.3:a:todd_miller:sudo:1.8.14:p3:*:*:*:*:*:*
History

21 Nov 2024, 02:57

Type Values Removed Values Added
References () http://rhn.redhat.com/errata/RHSA-2016-2872.html - () http://rhn.redhat.com/errata/RHSA-2016-2872.html -
References () http://www.securityfocus.com/bid/95776 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/95776 - Third Party Advisory, VDB Entry
References () https://bugzilla.redhat.com/show_bug.cgi?id=1372830 - Issue Tracking, Third Party Advisory, VDB Entry () https://bugzilla.redhat.com/show_bug.cgi?id=1372830 - Issue Tracking, Third Party Advisory, VDB Entry
References () https://usn.ubuntu.com/3968-3/ - () https://usn.ubuntu.com/3968-3/ -
References () https://www.sudo.ws/alerts/noexec_bypass.html - () https://www.sudo.ws/alerts/noexec_bypass.html -
Information

Published : 2017-04-14 18:59

Updated : 2025-04-20 01:37

NVD link : CVE-2016-7032

Mitre link : CVE-2016-7032

CVE.ORG link : CVE-2016-7032

JSON object : View

Products Affected

todd_miller

  • sudo
CWE
CWE-284

Improper Access Control