CVE-2016-7076 Security feature bypass in sudo

What is CVE-2016-7076?

CVE-2016-7076 is a medium-severity vulnerability in [UNKNOWN] sudo, published on 29 May 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.

Weakness: CWE-77, CWE-184

Which versions are affected by CVE-2016-7076?

It affects 1 product.

Products include Sudo Project Sudo.

How do I fix CVE-2016-7076?

Upgrade to a fixed version.

Is CVE-2016-7076 being exploited?

There is no known exploitation of CVE-2016-7076 in the wild and no public exploit code.

Other vulnerabilities in [UNKNOWN] sudo

• CVE-2017-1000368 Command injection in n/a High 8.2
• CVE-2015-5602 Privilege escalation in n/a High 7.2
• CVE-2022-43995 Memory corruption in n/a High 7.1
• CVE-2023-42465 Privilege escalation in n/a High 7.0
• CVE-2019-18684 Race condition in n/a High 7.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2016-7076, GHSA-v56m-9vh5-5qh5, MGASA-2016-0389, UBUNTU-CVE-2016-7076.