CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14287

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.846

EPSS Ranking 99.3%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.0

References

Products affected by CVE-2019-14287

Netapp » Element Software Management Node » Version: N/A

cpe:2.3:a:netapp:element_software_management_node:-
Redhat » Openshift Container Platform » Version: 4.1

cpe:2.3:a:redhat:openshift_container_platform:4.1
Redhat » Virtualization » Version: 4.2

cpe:2.3:a:redhat:virtualization:4.2
Sudo Project » Sudo » Version: 1.3.0

cpe:2.3:a:sudo_project:sudo:1.3.0
Sudo Project » Sudo » Version: 1.3.1

cpe:2.3:a:sudo_project:sudo:1.3.1
Sudo Project » Sudo » Version: 1.4.0

cpe:2.3:a:sudo_project:sudo:1.4.0
Sudo Project » Sudo » Version: 1.5.0

cpe:2.3:a:sudo_project:sudo:1.5.0
Sudo Project » Sudo » Version: 1.5.1

cpe:2.3:a:sudo_project:sudo:1.5.1
Sudo Project » Sudo » Version: 1.5.2

cpe:2.3:a:sudo_project:sudo:1.5.2
Sudo Project » Sudo » Version: 1.5.3

cpe:2.3:a:sudo_project:sudo:1.5.3
Sudo Project » Sudo » Version: 1.5.4

cpe:2.3:a:sudo_project:sudo:1.5.4
Sudo Project » Sudo » Version: 1.5.6

cpe:2.3:a:sudo_project:sudo:1.5.6
Sudo Project » Sudo » Version: 1.5.7

cpe:2.3:a:sudo_project:sudo:1.5.7
Sudo Project » Sudo » Version: 1.5.8

cpe:2.3:a:sudo_project:sudo:1.5.8
Sudo Project » Sudo » Version: 1.5.9

cpe:2.3:a:sudo_project:sudo:1.5.9
Sudo Project » Sudo » Version: 1.6.0

cpe:2.3:a:sudo_project:sudo:1.6.0
Sudo Project » Sudo » Version: 1.6.1

cpe:2.3:a:sudo_project:sudo:1.6.1
Sudo Project » Sudo » Version: 1.6.2

cpe:2.3:a:sudo_project:sudo:1.6.2
Sudo Project » Sudo » Version: 1.6.3

cpe:2.3:a:sudo_project:sudo:1.6.3
Sudo Project » Sudo » Version: 1.6.4

cpe:2.3:a:sudo_project:sudo:1.6.4
Sudo Project » Sudo » Version: 1.6.5

cpe:2.3:a:sudo_project:sudo:1.6.5
Sudo Project » Sudo » Version: 1.6.6

cpe:2.3:a:sudo_project:sudo:1.6.6
Sudo Project » Sudo » Version: 1.6.7

cpe:2.3:a:sudo_project:sudo:1.6.7
Sudo Project » Sudo » Version: 1.6.8

cpe:2.3:a:sudo_project:sudo:1.6.8
Sudo Project » Sudo » Version: 1.6.9

cpe:2.3:a:sudo_project:sudo:1.6.9
Sudo Project » Sudo » Version: 1.7.0

cpe:2.3:a:sudo_project:sudo:1.7.0
Sudo Project » Sudo » Version: 1.7.1

cpe:2.3:a:sudo_project:sudo:1.7.1
Sudo Project » Sudo » Version: 1.7.10

cpe:2.3:a:sudo_project:sudo:1.7.10
Sudo Project » Sudo » Version: 1.7.2

cpe:2.3:a:sudo_project:sudo:1.7.2
Sudo Project » Sudo » Version: 1.7.3

cpe:2.3:a:sudo_project:sudo:1.7.3
Sudo Project » Sudo » Version: 1.7.4

cpe:2.3:a:sudo_project:sudo:1.7.4
Sudo Project » Sudo » Version: 1.7.5

cpe:2.3:a:sudo_project:sudo:1.7.5
Sudo Project » Sudo » Version: 1.7.6

cpe:2.3:a:sudo_project:sudo:1.7.6
Sudo Project » Sudo » Version: 1.7.7

cpe:2.3:a:sudo_project:sudo:1.7.7
Sudo Project » Sudo » Version: 1.7.8

cpe:2.3:a:sudo_project:sudo:1.7.8
Sudo Project » Sudo » Version: 1.7.9

cpe:2.3:a:sudo_project:sudo:1.7.9
Sudo Project » Sudo » Version: 1.8.0

cpe:2.3:a:sudo_project:sudo:1.8.0
Sudo Project » Sudo » Version: 1.8.1

cpe:2.3:a:sudo_project:sudo:1.8.1
Sudo Project » Sudo » Version: 1.8.10

cpe:2.3:a:sudo_project:sudo:1.8.10
Sudo Project » Sudo » Version: 1.8.11

cpe:2.3:a:sudo_project:sudo:1.8.11
Sudo Project » Sudo » Version: 1.8.12

cpe:2.3:a:sudo_project:sudo:1.8.12
Sudo Project » Sudo » Version: 1.8.13

cpe:2.3:a:sudo_project:sudo:1.8.13
Sudo Project » Sudo » Version: 1.8.14

cpe:2.3:a:sudo_project:sudo:1.8.14
Sudo Project » Sudo » Version: 1.8.15

cpe:2.3:a:sudo_project:sudo:1.8.15
Sudo Project » Sudo » Version: 1.8.16

cpe:2.3:a:sudo_project:sudo:1.8.16
Sudo Project » Sudo » Version: 1.8.17

cpe:2.3:a:sudo_project:sudo:1.8.17
Sudo Project » Sudo » Version: 1.8.18

cpe:2.3:a:sudo_project:sudo:1.8.18
Sudo Project » Sudo » Version: 1.8.19

cpe:2.3:a:sudo_project:sudo:1.8.19
Sudo Project » Sudo » Version: 1.8.2

cpe:2.3:a:sudo_project:sudo:1.8.2
Sudo Project » Sudo » Version: 1.8.20

cpe:2.3:a:sudo_project:sudo:1.8.20
Sudo Project » Sudo » Version: 1.8.21

cpe:2.3:a:sudo_project:sudo:1.8.21
Sudo Project » Sudo » Version: 1.8.22

cpe:2.3:a:sudo_project:sudo:1.8.22
Sudo Project » Sudo » Version: 1.8.23

cpe:2.3:a:sudo_project:sudo:1.8.23
Sudo Project » Sudo » Version: 1.8.24

cpe:2.3:a:sudo_project:sudo:1.8.24
Sudo Project » Sudo » Version: 1.8.25

cpe:2.3:a:sudo_project:sudo:1.8.25
Sudo Project » Sudo » Version: 1.8.26

cpe:2.3:a:sudo_project:sudo:1.8.26
Sudo Project » Sudo » Version: 1.8.27

cpe:2.3:a:sudo_project:sudo:1.8.27
Sudo Project » Sudo » Version: 1.8.3

cpe:2.3:a:sudo_project:sudo:1.8.3
Sudo Project » Sudo » Version: 1.8.4

cpe:2.3:a:sudo_project:sudo:1.8.4
Sudo Project » Sudo » Version: 1.8.5

cpe:2.3:a:sudo_project:sudo:1.8.5
Sudo Project » Sudo » Version: 1.8.6

cpe:2.3:a:sudo_project:sudo:1.8.6
Sudo Project » Sudo » Version: 1.8.7

cpe:2.3:a:sudo_project:sudo:1.8.7
Sudo Project » Sudo » Version: 1.8.8

cpe:2.3:a:sudo_project:sudo:1.8.8
Sudo Project » Sudo » Version: 1.8.9

cpe:2.3:a:sudo_project:sudo:1.8.9
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Canonical » Ubuntu Linux » Version: 18.04

cpe:2.3:o:canonical:ubuntu_linux:18.04
Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 29

cpe:2.3:o:fedoraproject:fedora:29
Fedoraproject » Fedora » Version: 30

cpe:2.3:o:fedoraproject:fedora:30
Fedoraproject » Fedora » Version: 31

cpe:2.3:o:fedoraproject:fedora:31
Opensuse » Leap » Version: 15.0

cpe:2.3:o:opensuse:leap:15.0
Opensuse » Leap » Version: 15.1

cpe:2.3:o:opensuse:leap:15.1
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux Desktop » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Eus » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux_eus:7.5
Redhat » Enterprise Linux Eus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_eus:7.6
Redhat » Enterprise Linux Eus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_eus:7.7
Redhat » Enterprise Linux Eus » Version: 8.1

cpe:2.3:o:redhat:enterprise_linux_eus:8.1
Redhat » Enterprise Linux Eus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_eus:8.2
Redhat » Enterprise Linux Eus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_eus:8.4
Redhat » Enterprise Linux Server » Version: 5.0

cpe:2.3:o:redhat:enterprise_linux_server:5.0
Redhat » Enterprise Linux Server » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_server:6.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Server Aus » Version: 6.5

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5
Redhat » Enterprise Linux Server Aus » Version: 6.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6
Redhat » Enterprise Linux Server Aus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2
Redhat » Enterprise Linux Server Aus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3
Redhat » Enterprise Linux Server Aus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4
Redhat » Enterprise Linux Server Aus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
Redhat » Enterprise Linux Server Aus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7
Redhat » Enterprise Linux Server Aus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2
Redhat » Enterprise Linux Server Aus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4
Redhat » Enterprise Linux Server Tus » Version: 7.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2
Redhat » Enterprise Linux Server Tus » Version: 7.3

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3
Redhat » Enterprise Linux Server Tus » Version: 7.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4
Redhat » Enterprise Linux Server Tus » Version: 7.6

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
Redhat » Enterprise Linux Server Tus » Version: 7.7

cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7
Redhat » Enterprise Linux Server Tus » Version: 8.2

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2
Redhat » Enterprise Linux Server Tus » Version: 8.4

cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4
Redhat » Enterprise Linux Workstation » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-14287

Products

Pricing

Contact Us