In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules,…

Description

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.

Scores

EPSS (exploitation in 30 days)

63.8% · top 0.8% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Weakness

• n/a
• CWE-755 (opens in a new tab)All about CWE-755 and its CVEs

Affected products

• n/a

  • affected n/a

References (37)

• [oss-security] 20191014 Sudo: CVE-2019-14287 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• USN-4154-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
• DSA-4543 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
• 20191015 [SECURITY] [DSA 4543-1] sudo security update (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 20191015 [slackware-security] sudo (SSA:2019-287-01) (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• openSUSE-SU-2019:2316 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• http://packetstormsecurity.com/files/154853/Slackware-Security-Advisory-sudo-Updates.html (opens in a new tab)x_refsource_MISCx_transferred
• FEDORA-2019-9cb221f2be (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• https://www.sudo.ws/alerts/minus_1_uid.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• openSUSE-SU-2019:2333 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
• https://security.netapp.com/advisory/ntap-20191017-0003/ (opens in a new tab)x_refsource_CONFIRMx_transferred
• [oss-security] 20191015 Re: Sudo: CVE-2019-14287 (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• [debian-lts-announce] 20191017 [SECURITY] [DLA 1964-1] sudo security update (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• FEDORA-2019-67998e9f7e (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• https://support.f5.com/csp/article/K53746212?utm_source=f5support&amp%3Butm_medium=RSS (opens in a new tab)x_refsource_CONFIRMx_transferred
• [oss-security] 20191023 Membership application for linux-distros - VMware (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• RHSA-2019:3197 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3205 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3204 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3209 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3219 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• [oss-security] 20191029 Re: Membership application for linux-distros - VMware (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• FEDORA-2019-72755db9c7 (opens in a new tab)vendor-advisoryx_refsource_FEDORAx_transferred
• RHSA-2019:3278 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• https://resources.whitesourcesoftware.com/blog-whitesource/new-vulnerability-in-sudo-cve-2019-14287 (opens in a new tab)x_refsource_MISCx_transferred
• RHSA-2019:3694 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3755 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3754 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3895 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3916 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHBA-2019:3248 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:3941 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• RHSA-2019:4191 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03976en_us (opens in a new tab)x_refsource_CONFIRMx_transferred
• RHSA-2020:0388 (opens in a new tab)vendor-advisoryx_refsource_REDHATx_transferred
• GLSA-202003-12 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• [oss-security] 20210914 Re: Oracle Solaris membership in the distros list (opens in a new tab)mailing-listx_refsource_MLISTx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-14287](https://trackcve.app/badge/CVE-2019-14287.svg)](https://trackcve.app/cve/CVE-2019-14287)

Record last updated 5 Aug 2024, 00:12 UTC.