CVE-2016-7032

Published: Apr 14, 2017Modified: May 13, 2026

7.0

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.

Affected (28)

Products: Todd Miller: Sudo

Todd Miller

1 product

Sudo

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Todd Miller Sudo	Version 1.6.8
Todd Miller Sudo	Version 1.6.9
Todd Miller Sudo	Version 1.7.0
Todd Miller Sudo	Version 1.7.10
Todd Miller Sudo	Version 1.7.1
Todd Miller Sudo	Version 1.7.2
Todd Miller Sudo	Version 1.7.3
Todd Miller Sudo	Version 1.7.4
Todd Miller Sudo	Version 1.7.5
Todd Miller Sudo	Version 1.7.6
Todd Miller Sudo	Version 1.7.7
Todd Miller Sudo	Version 1.7.8
Todd Miller Sudo	Version 1.7.9
Todd Miller Sudo	Version 1.8.0
Todd Miller Sudo	Version 1.8.10
Todd Miller Sudo	Version 1.8.11
Todd Miller Sudo	Version 1.8.12
Todd Miller Sudo	Version 1.8.13
Todd Miller Sudo	Version 1.8.14 p3
Todd Miller Sudo	Version 1.8.1
Todd Miller Sudo	Version 1.8.2
Todd Miller Sudo	Version 1.8.3
Todd Miller Sudo	Version 1.8.4
Todd Miller Sudo	Version 1.8.5
Todd Miller Sudo	Version 1.8.6
Todd Miller Sudo	Version 1.8.7
Todd Miller Sudo	Version 1.8.8
Todd Miller Sudo	Version 1.8.9