Medium ELSA-2016-2872 2 CVEs

Moderate: sudo security update (Oracle Linux 7)

Published Dec 6, 2016 · Updated Dec 6, 2016

Ecosystem: Oracle Linux

Summary

[1.8.6p3-25]
- Update noexec syscall blacklist
- Fixes CVE-2016-7032 and CVE-2016-7076
Resolves: rhbz#1391937

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	sudo	0:1.8.6p7-21.el7_3
Oracle Linux · 7	sudo-devel	0:1.8.6p7-21.el7_3

Vulnerabilities 2

Medium 6.4

CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo execu…

[UNKNOWN] sudo sudo sudo Debian Ubuntu

May 29, 2018
Unscored —

CVE-2016-7032

sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions vi…

sudo sudo Debian Ubuntu

Apr 14, 2017