CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 21.9%

CVSS Severity

CVSS v3 Score 6.4

CVSS v2 Score 7.2

References

Products affected by CVE-2016-7076

Sudo Project » Sudo » Version: 1.6.8

cpe:2.3:a:sudo_project:sudo:1.6.8
Sudo Project » Sudo » Version: 1.6.9

cpe:2.3:a:sudo_project:sudo:1.6.9
Sudo Project » Sudo » Version: 1.7.0

cpe:2.3:a:sudo_project:sudo:1.7.0
Sudo Project » Sudo » Version: 1.7.1

cpe:2.3:a:sudo_project:sudo:1.7.1
Sudo Project » Sudo » Version: 1.7.10

cpe:2.3:a:sudo_project:sudo:1.7.10
Sudo Project » Sudo » Version: 1.7.2

cpe:2.3:a:sudo_project:sudo:1.7.2
Sudo Project » Sudo » Version: 1.7.3

cpe:2.3:a:sudo_project:sudo:1.7.3
Sudo Project » Sudo » Version: 1.7.4

cpe:2.3:a:sudo_project:sudo:1.7.4
Sudo Project » Sudo » Version: 1.7.5

cpe:2.3:a:sudo_project:sudo:1.7.5
Sudo Project » Sudo » Version: 1.7.6

cpe:2.3:a:sudo_project:sudo:1.7.6
Sudo Project » Sudo » Version: 1.7.7

cpe:2.3:a:sudo_project:sudo:1.7.7
Sudo Project » Sudo » Version: 1.7.8

cpe:2.3:a:sudo_project:sudo:1.7.8
Sudo Project » Sudo » Version: 1.7.9

cpe:2.3:a:sudo_project:sudo:1.7.9
Sudo Project » Sudo » Version: 1.8.0

cpe:2.3:a:sudo_project:sudo:1.8.0
Sudo Project » Sudo » Version: 1.8.1

cpe:2.3:a:sudo_project:sudo:1.8.1
Sudo Project » Sudo » Version: 1.8.10

cpe:2.3:a:sudo_project:sudo:1.8.10
Sudo Project » Sudo » Version: 1.8.11

cpe:2.3:a:sudo_project:sudo:1.8.11
Sudo Project » Sudo » Version: 1.8.12

cpe:2.3:a:sudo_project:sudo:1.8.12
Sudo Project » Sudo » Version: 1.8.13

cpe:2.3:a:sudo_project:sudo:1.8.13
Sudo Project » Sudo » Version: 1.8.14

cpe:2.3:a:sudo_project:sudo:1.8.14
Sudo Project » Sudo » Version: 1.8.15

cpe:2.3:a:sudo_project:sudo:1.8.15
Sudo Project » Sudo » Version: 1.8.16

cpe:2.3:a:sudo_project:sudo:1.8.16
Sudo Project » Sudo » Version: 1.8.17

cpe:2.3:a:sudo_project:sudo:1.8.17
Sudo Project » Sudo » Version: 1.8.18

cpe:2.3:a:sudo_project:sudo:1.8.18
Sudo Project » Sudo » Version: 1.8.2

cpe:2.3:a:sudo_project:sudo:1.8.2
Sudo Project » Sudo » Version: 1.8.3

cpe:2.3:a:sudo_project:sudo:1.8.3
Sudo Project » Sudo » Version: 1.8.4

cpe:2.3:a:sudo_project:sudo:1.8.4
Sudo Project » Sudo » Version: 1.8.5

cpe:2.3:a:sudo_project:sudo:1.8.5
Sudo Project » Sudo » Version: 1.8.6

cpe:2.3:a:sudo_project:sudo:1.8.6
Sudo Project » Sudo » Version: 1.8.7

cpe:2.3:a:sudo_project:sudo:1.8.7
Sudo Project » Sudo » Version: 1.8.8

cpe:2.3:a:sudo_project:sudo:1.8.8
Sudo Project » Sudo » Version: 1.8.9

cpe:2.3:a:sudo_project:sudo:1.8.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-7076

Products

Pricing

Contact Us