An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es) :

* It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system(), popen(), or wordexp() C library functions with a user-supplied argument. A local user permitted to run such application via sudo with noexec restriction could use these flaws to execute arbitrary commands with elevated privileges. (CVE-2016-7032, CVE-2016-7076)

These issues were discovered by Florian Weimer (Red Hat).

This update for sudo fixes the following issues :

  - Fix two security vulnerabilities that allowed users to     bypass sudo's NOEXEC functionality :

  - noexec bypass via system() and popen() [CVE-2016-7032,     bsc#1007766]

  - noexec bypass via wordexp() [CVE-2016-7076, bsc#1007501]

  - The SSSD plugin would occasionally crash sudo with an     'internal error'. This issue has been fixed.
    [bsc#948973]

  - The SSSD plugin would occasionally apply @netgroups     rules from LDAP to all users rather than the @netgroup.
    This issue is now fixed. [bsc#966755]

  - When the SSSD plugin was used and a local user ran sudo,     an e-mail used to be sent to administrator because SSSD     did not support sudo rules for local users. This message     did not signify an error, however, it was only noise.
    [bsc#1008043]

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system(), popen() or wordexp() C library functions with a user-supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.

CVE-2016-7032

noexec bypass via system() and popen()

CVE-2016-7076

noexec bypass via wordexp()

For Debian 7 'Wheezy', these problems have been fixed in version 1.8.5p2-1+nmu3+deb7u2.

We recommend that you upgrade your sudo packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sudo fixes the following security issues :

  - Fix two security vulnerabilities that allowed users to     bypass sudo's NOEXEC functionality :

  - noexec bypass via system() and popen() [CVE-2016-7032,     bsc#1007766]

  - noexec bypass via wordexp() [CVE-2016-7076, bsc#1007501]

  - Fix unsafe handling of TZ environment variable.
    [CVE-2014-9680, bsc#917806]

Additionally, these non-security fixes are included in the update :

  - Fix 'ignoring time stamp from the future' message after     each boot with !tty_tickets. [bsc#899252]

  - Enable support for SASL-based authentication.
    [bsc#979531]

This update was imported from the SUSE:SLE-12:Update update project.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-1156:02 advisory.

    Sudo (superuser do) allows a system administrator to give certain     users (or groups of users) the ability to run some (or all) commands     as root while logging all commands and arguments. Sudo operates on a     per-command basis.  It is not a replacement for the shell.  Features     include: the ability to restrict what commands a user may run on a     per-host basis, copious logging of each command (providing a clear     audit trail of who did what), a configurable timeout of the sudo     command, and the ability to use the same configuration file (sudoers)     on many different machines.
    Security issues fixed with this release:
    CVE-2016-7032
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-7076
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2016-1155:03 advisory.

    Sudo (superuser do) allows a system administrator to give certain     users (or groups of users) the ability to run some (or all) commands     as root while logging all commands and arguments. Sudo operates on a     per-command basis.  It is not a replacement for the shell.  Features     include: the ability to restrict what commands a user may run on a     per-host basis, copious logging of each command (providing a clear     audit trail of who did what), a configurable timeout of the sudo     command, and the ability to use the same configuration file (sudoers)     on many different machines.
    Security issues fixed with this release:
    CVE-2016-7032
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2016-7076
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - It was discovered that the sudo noexec restriction could     have been bypassed if application run via sudo executed     system(), popen(), or wordexp() C library functions with     a user-supplied argument. A local user permitted to run     such application via sudo with noexec restriction could     use these flaws to execute arbitrary commands with     elevated privileges. (CVE-2016-7032, CVE-2016-7076)

These issues were discovered by Florian Weimer (Red Hat).

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
95600	RHEL 6 / 7 : sudo (RHSA-2016:2872)	Nessus	Red Hat Local Security Checks	2016/12/7	2026/1/15	high
95312	SUSE SLES11 Security Update : sudo (SUSE-SU-2016:2891-1)	Nessus	SuSE Local Security Checks	2016/11/25	2026/1/16	high
94764	Debian DLA-707-1 : sudo security update	Nessus	Debian Local Security Checks	2016/11/15	2026/1/19	high
95556	openSUSE Security Update : sudo (openSUSE-2016-1402)	Nessus	SuSE Local Security Checks	2016/12/6	2026/1/15	high
289613	MiracleLinux 4 : sudo-1.8.6p3-25.AXS4 (AXSA:2016-1156:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
289103	MiracleLinux 7 : sudo-1.8.6p7-21.el7 (AXSA:2016-1155:03)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
95577	CentOS 6 / 7 : sudo (CESA-2016:2872)	Nessus	CentOS Local Security Checks	2016/12/7	2021/1/4	high
95871	Scientific Linux Security Update : sudo on SL6.x, SL7.x i386/x86_64 (20161206)	Nessus	Scientific Linux Local Security Checks	2016/12/15	2026/1/8	high

检测

插件搜索

high

high

high

high

high

high

high

high