CVE-2016-7076

Name of the Vulnerable Software and Affected Versions sudo versions prior to 1.8.18p1

Description The issue allows a local user to bypass the sudo noexec restriction. This can happen when an application run via sudo executes the wordexp() C library function with a user-supplied argument. As a result, a local user permitted to run such an application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.

Recommendations For versions prior to 1.8.18p1, update to version 1.8.18p1 or later to resolve the issue.