CVE-2016-7076

🗓️ 29 May 2018 13:00:00Reported by redhatType

sudo version 1.8.18p1 bypass vulnerability with elevated privilege

Reporter	Title	Published	Views	Family All 89
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in sudo affect PowerKVM	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known vulnerabilities (multiple CVEs)	16 Jun 201822:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in expat, nss, bind , policycoreutils, sudo shipped with SmartCloud Entry Appliance	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in sudo.	31 Jan 201902:25	–	ibm
FreeBSD	sudo -- Potential bypass of sudo_noexec.so via wordexp()	28 Oct 201600:00	–	freebsd
Amazon	Medium: sudo	4 Jan 201700:00	–	amazon
Tenable Nessus	Amazon Linux AMI : sudo (ALAS-2017-780)	5 Jan 201700:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : sudo (CESA-2016:2872)	7 Dec 201600:00	–	nessus
Tenable Nessus	Debian DLA-707-1 : sudo security update	15 Nov 201600:00	–	nessus

[
  {
    "product": "sudo",
    "vendor": "[UNKNOWN]",
    "versions": [
      {
        "status": "affected",
        "version": "sudo 1.8.18p1"
      }
    ]
  }
]

Source	Link
rhn	www.rhn.redhat.com/errata/RHSA-2016-2872.html
security	www.security.netapp.com/advisory/ntap-20181127-0002/
usn	www.usn.ubuntu.com/3968-1/
usn	www.usn.ubuntu.com/3968-3/
securityfocus	www.securityfocus.com/bid/95778
sudo	www.sudo.ws/alerts/noexec_wordexp.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

29 Sep 2020 17:06Current

8High risk

Vulners AI Score8

CVSS 36.4

EPSS0.00077

CWE-184