CVE-2016-7091

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC…

published December 22, 2016

CVSS
—
EPSS
0%
Percentile
33.1
In the wild
Unconfirmed
What it is

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00403 · 33.1th percentile
Published
2016-12-22T21:00Z
EPSS history
Timeline
  • 22 DEC 21:00Z
    sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC…
    cvelistv5