Homepage

Arbitrary Command Injection Affecting sudo-devel package, versions <0:1.8.6p7-21.el7_3

Severity

 Recommended
medium

Based on Oracle Linux security rating.

Threat Intelligence

EPSS
0.04% (6th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Arbitrary Command Injection vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-ORACLE7-SUDODEVEL-2509644
  • published10 Apr 2022
  • disclosed29 May 2018
Report a new vulnerability Found a mistake?

Introduced: 29 May 2018

CVE-2016-7076  (opens in a new tab)
CWE-77  (opens in a new tab)

How to fix?

Upgrade Oracle:7 sudo-devel to version 0:1.8.6p7-21.el7_3 or higher.
This issue was patched in ELSA-2016-2872.

NVD Description

Note: Versions mentioned in the description apply only to the upstream sudo-devel package and not the sudo-devel package as distributed by Oracle. See How to fix? for Oracle:7 relevant fixed versions and status.

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.