UBUNTU-CVE-2016-7032

sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.

References

Affected packages

Ubuntu:Pro:14.04:LTS / sudo

Package

Name: sudo
Purl: pkg:deb/ubuntu/sudo@1.8.9p5-1ubuntu1.5+esm5?arch=source&distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.9p5-1ubuntu1.5+esm5

Affected versions

1.*

1.8.6p3-0ubuntu3

1.8.8-2ubuntu1

1.8.8-2ubuntu2

1.8.9p4-1ubuntu1

1.8.9p4-1ubuntu2

1.8.9p5-1ubuntu1

1.8.9p5-1ubuntu1.1

1.8.9p5-1ubuntu1.2

1.8.9p5-1ubuntu1.3

1.8.9p5-1ubuntu1.4

1.8.9p5-1ubuntu1.5+esm1

1.8.9p5-1ubuntu1.5+esm2

1.8.9p5-1ubuntu1.5+esm3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "1.8.9p5-1ubuntu1.5+esm5",
            "binary_name": "sudo"
        },
        {
            "binary_version": "1.8.9p5-1ubuntu1.5+esm5",
            "binary_name": "sudo-ldap"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}