sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.
CVSS Details
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | amazon-linux-upgrade-sudo | Jan 5, 2017 | Nov 22, 2016 |
| Centos_linux | — | centos-upgrade-sudocentos-upgrade-sudo-devel | Jan 27, 2017 | Nov 22, 2016 |
| Debian | debian-upgrade-sudo | Mar 31, 2017 | Nov 14, 2016 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-sudo | Nov 30, 2017 | Apr 14, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-sudooracle-linux-upgrade-sudo-devel | Dec 6, 2016 | Oct 26, 2016 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-sudoredhat-upgrade-sudo-debuginforedhat-upgrade-sudo-devel | Dec 9, 2016 | Nov 22, 2016 | |
| Suse | — | suse-upgrade-sudosuse-upgrade-sudo-develsuse-upgrade-sudo-plugin-python | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | ubuntu-pro-upgrade-sudoubuntu-pro-upgrade-sudo-ldap | Sep 29, 2020 | Nov 22, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub