Fluid Attacks Database

Description

sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	sudo	>=0 <1.8.15-1	1.8.15-1
debian 13	sudo	>=0 <1.8.15-1	1.8.15-1
debian 14	sudo	>=0 <1.8.15-1	1.8.15-1
debian 12	sudo	>=0 <1.8.15-1	1.8.15-1
rpm rhel7	sudo	<0:1.8.6p7-21.el7_3	0:1.8.6p7-21.el7_3
rpm rhel6	sudo	<0:1.8.6p3-25.el6_8	0:1.8.6p3-25.el6_8
rpm rhel5	sudo	-	-

Aliases

1. CVE-2016-70322. NVD-2016-70323. OSV-DEBIAN-2016-70324. OSV-2016-70325. SECURITY-TRACKER-CVE-2016-7032

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.