This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-7076 →

DEBIAN-CVE-2016-7076

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library functio...

Original description

The description as published by the source.

sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 sudo

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.18p1-1"}]}]

Debian:13 sudo

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.18p1-1"}]}]

Debian:14 sudo

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.18p1-1"}]}]

References

advisory security-tracker.debian.org