CVE-2016-7091 | BDVDB-2026-79898 Detail

Description#

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure. A local user with sudo access to a restricted program that uses readline could use this flaw to read content from specially formatted files with elevated privileges provided by sudo.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12016-12-22Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.