NetSight
IP …
high8.8Public exploit code

CVE-2019-14287

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorr…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.

Affected products

VendorProductAffected versions
Sudo ProjectSudo
before 1.8.28
FedoraprojectFedora
Versions 29, 30, 31
DebianDebian Linux
Versions 8.0, 9.0, 10.0
OpensuseLeap
Versions 15.0, 15.1
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 19.04
NetappElement Software Management Node
All versions
RedhatOpenshift Container Platform
Version 4.1
RedhatVirtualization
Version 4.2
RedhatEnterprise Linux
Version 8.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Eus
Versions 7.5, 7.6, 7.7, 8.1, 8.2, 8.4
RedhatEnterprise Linux Server
Versions 5.0, 6.0, 7.0

Weakness classification

CWE-755

References