Lucene search
RedHatRHSA-2016:2872HistoryDec 06, 2016 - 9:43 a.m.
(RHSA-2016:2872) Moderate: sudo security update
2016-12-0609:43:08
access.redhat.com
49
0.0004 Low
EPSS
Percentile
5.1%
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system(), popen(), or wordexp() C library functions with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could use these flaws to execute arbitrary commands with elevated privileges. (CVE-2016-7032, CVE-2016-7076)
These issues were discovered by Florian Weimer (Red Hat).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | s390 | sudo-debuginfo | < 1.8.6p7-21.el7_3 | sudo-debuginfo-1.8.6p7-21.el7_3.s390.rpm |
| RedHat | 7 | ppc64 | sudo-debuginfo | < 1.8.6p7-21.el7_3 | sudo-debuginfo-1.8.6p7-21.el7_3.ppc64.rpm |
| RedHat | 6 | ppc | sudo-debuginfo | < 1.8.6p3-25.el6_8 | sudo-debuginfo-1.8.6p3-25.el6_8.ppc.rpm |
| RedHat | 6 | ppc64 | sudo-debuginfo | < 1.8.6p3-25.el6_8 | sudo-debuginfo-1.8.6p3-25.el6_8.ppc64.rpm |
| RedHat | 7 | ppc64le | sudo-devel | < 1.8.6p7-21.el7_3 | sudo-devel-1.8.6p7-21.el7_3.ppc64le.rpm |
| RedHat | 6 | s390x | sudo-devel | < 1.8.6p3-25.el6_8 | sudo-devel-1.8.6p3-25.el6_8.s390x.rpm |
| RedHat | 6 | s390x | sudo | < 1.8.6p3-25.el6_8 | sudo-1.8.6p3-25.el6_8.s390x.rpm |
| RedHat | 7 | x86_64 | sudo-debuginfo | < 1.8.6p7-21.el7_3 | sudo-debuginfo-1.8.6p7-21.el7_3.x86_64.rpm |
| RedHat | 6 | ppc64 | sudo-devel | < 1.8.6p3-25.el6_8 | sudo-devel-1.8.6p3-25.el6_8.ppc64.rpm |
| RedHat | 7 | ppc64le | sudo-debuginfo | < 1.8.6p7-21.el7_3 | sudo-debuginfo-1.8.6p7-21.el7_3.ppc64le.rpm |
Related
openvas
openvas
CentOS Update for sudo CESA-2016:2872 centos7
2017-06-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:2891-1)
2021-06-09 00:00:00
RedHat Update for sudo RHSA-2016:2872-01
2016-12-07 00:00:00
debian
debian
[SECURITY] [DLA 707-1] sudo security update
2016-11-14 19:56:05
nessus
nessus
EulerOS 2.0 SP1 : sudo (EulerOS-SA-2017-1004)
2017-05-01 00:00:00
Oracle Linux 6 / 7 : sudo (ELSA-2016-2872)
2016-12-07 00:00:00
OracleVM 3.3 / 3.4 : sudo (OVMSA-2016-0170)
2016-12-07 00:00:00
ibm
ibm
centos
centos
sudo security update
2016-12-07 03:43:16
osv
osv
sudo - security update
2016-11-14 00:00:00
sudo vulnerabilities
2020-09-28 12:54:26
CVE-2016-7076
2018-05-29 13:29:00
ubuntu
ubuntu
Sudo vulnerabilities
2020-09-28 00:00:00
Sudo vulnerabilities
2019-05-06 00:00:00
oraclelinux
oraclelinux
sudo security update
2016-12-06 00:00:00
ubuntucve
ubuntucve
CVE-2016-7076
2018-05-29 00:00:00
CVE-2016-7032
2017-04-14 00:00:00
amazon
amazon
Medium: sudo
2017-01-04 17:00:00
f5
f5
redhatcve
redhatcve
CVE-2016-7032
2016-10-27 19:47:40
CVE-2016-7076
2016-10-27 19:47:35
freebsd
freebsd
sudo -- Potential bypass of sudo_noexec.so via wordexp()
2016-10-28 00:00:00
prion
prion
Design/Logic Flaw
2018-05-29 13:29:00
Command injection
2017-04-14 18:59:00
fedora
fedora
[SECURITY] Fedora 25 Update: sudo-1.8.18p1-1.fc25
2016-11-19 22:13:00
[SECURITY] Fedora 23 Update: sudo-1.8.18p1-1.fc23
2016-11-25 07:24:28
[SECURITY] Fedora 24 Update: sudo-1.8.18p1-1.fc24
2016-11-11 20:53:34
debiancve
debiancve
CVE-2016-7032
2017-04-14 18:59:00
CVE-2016-7076
2018-05-29 13:29:00
cvelist
cvelist
CVE-2016-7076
2018-05-29 13:00:00
CVE-2016-7032
2017-04-14 18:00:00
veracode
veracode
Privilege Escalation
2019-05-02 06:07:50
Authorization Bypass
2019-01-15 09:14:59
mageia
mageia
Updated sudo packages fix security vulnerability
2016-11-18 02:40:52
nvd
nvd
CVE-2016-7076
2018-05-29 13:29:00
CVE-2016-7032
2017-04-14 18:59:00
cve
cve
CVE-2016-7076
2018-05-29 13:29:00
CVE-2016-7032
2017-04-14 18:59:00
cloudfoundry
cloudfoundry
USN-3968-1: Sudo vulnerabilities | Cloud Foundry
2019-05-20 00:00:00