MGASA-2016-0389 Updated sudo packages fix security vulnerability

🗓️ 17 Nov 2016 23:40:52Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

Updated sudo packages fix a vulnerability allowing privilege escalation via wordexp function.

Reporter	Title	Published	Views	Family All 89
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known Vulnerabilities	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in sudo affect PowerKVM	18 Jun 201801:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Using Components with Known vulnerabilities (multiple CVEs)	16 Jun 201822:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in expat, nss, bind , policycoreutils, sudo shipped with SmartCloud Entry Appliance	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in sudo.	31 Jan 201902:25	–	ibm
FreeBSD	sudo -- Potential bypass of sudo_noexec.so via wordexp()	28 Oct 201600:00	–	freebsd
Amazon	Medium: sudo	4 Jan 201700:00	–	amazon
Tenable Nessus	Amazon Linux AMI : sudo (ALAS-2017-780)	5 Jan 201700:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : sudo (CESA-2016:2872)	7 Dec 201600:00	–	nessus
Tenable Nessus	Debian DLA-707-1 : sudo security update	15 Nov 201600:00	–	nessus

Source	Link
advisories	www.advisories.mageia.org/MGASA-2016-0389.html
bugs	www.bugs.mageia.org/show_bug.cgi
sudo	www.sudo.ws/alerts/noexec_wordexp.html
sudo	www.sudo.ws/stable.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/thread/DBELDP5KT7URCP7P3RQFYBBKPBNLAJY6/

16 Apr 2026 06:22Current

7.8High risk

Vulners AI Score7.8

CVSS 27.2

CVSS 36.4 - 7.8

EPSS0.00077

sudo packages security vulnerability privilege escalation wordexp function