CVE-2016-7091: Infoleak
sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7091?
CVE-2016-7091 has a medium severity rating due to its potential for information disclosure.
How do I fix CVE-2016-7091?
To fix CVE-2016-7091, update to the latest version of sudo provided by Red Hat or apply the recommended patches.
Which systems are affected by CVE-2016-7091?
CVE-2016-7091 primarily affects Red Hat Enterprise Linux 7.0 and its variants, including Workstation and Server editions.
Can CVE-2016-7091 lead to privilege escalation?
CVE-2016-7091 does not directly lead to privilege escalation but may allow information disclosure for users with sudo access.
Is CVE-2016-7091 exploitable remotely?
CVE-2016-7091 is not remotely exploitable as it requires local access to the affected system.