This update for sudo fixes the following issues :

Security issue fixed :

CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

In sudo, a program that provides limited super user privileges to specific users, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of (ALL,!root) configuration for a 'sudo
-u#-1' command.

See https://www.sudo.ws/alerts/minus_1_uid.html for further information.

For Debian 8 'Jessie', this problem has been fixed in version 1.8.10p3-1+deb8u6.

We recommend that you upgrade your sudo packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

New sudo packages are available for Slackware 14.0, 14.1, 14.2, and
-current to fix a security issue.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4821 advisory.

    - Treat an ID of -1 as invalid since that means 'no change' [Orabug: 30421281] {CVE-2019-14287}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2019-4822 advisory.

    - Treat an ID of -1 as invalid since that means 'no change' [Orabug: 30421281] {CVE-2019-14287}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for sudo fixes the following issues :

CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sudo provides the following fix :

Security issue fixed :

CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674).

Other issues fixed: Cache resolved group names as calling getgrgid() is expensive and on systems connected to AD with many users, groups or sudo rules it causes sudo to take a long time to run (bsc#1068003).

Disable insults by default at build time. For new installations this was done via sudoers file, but when upgrading from previous versions it would accidentally be enabled (bsc#1053911).

Enable support for zlib compressed I/O logs (bsc#1058297).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the sudo package has been released.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3197 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3209 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

- Rebase to 1.8.28

  - Fixed CVE-2019-14287

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3754 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Sudo before 1.8.28, an attacker with access to a     Runas ALL sudoer account can bypass certain policy     blacklists and session PAM modules, and can cause     incorrect logging, by invoking sudo with a crafted user     ID. For example, this allows bypass of !root     configuration, and USER= logging, for a 'sudo -u     \#$((0xffffffff))' command.(CVE-2019-14287)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
129961	SUSE SLED12 / SLES12 Security Update : sudo (SUSE-SU-2019:2666-1)	Nessus	SuSE Local Security Checks	10/16/2019	1/20/2023	high
130031	Debian DLA-1964-1 : sudo security update	Nessus	Debian Local Security Checks	10/18/2019	4/17/2024	high
129868	Slackware 14.0 / 14.1 / 14.2 / current : sudo (SSA:2019-287-01)	Nessus	Slackware Local Security Checks	10/15/2019	1/23/2023	high
129955	Oracle Linux 7 : sudo (ELSA-2019-4821)	Nessus	Oracle Linux Local Security Checks	10/16/2019	10/23/2024	high
129956	Oracle Linux 8 : sudo (ELSA-2019-4822)	Nessus	Oracle Linux Local Security Checks	10/16/2019	10/23/2024	high
129962	SUSE SLES12 Security Update : sudo (SUSE-SU-2019:2667-1)	Nessus	SuSE Local Security Checks	10/16/2019	1/20/2023	high
129963	SUSE SLES12 Security Update : sudo (SUSE-SU-2019:2668-1)	Nessus	SuSE Local Security Checks	10/16/2019	1/20/2023	high
130105	Photon OS 3.0: Sudo PHSA-2019-3.0-0035	Nessus	PhotonOS Local Security Checks	10/22/2019	8/22/2025	high
130249	RHEL 7 : sudo (RHSA-2019:3197)	Nessus	Red Hat Local Security Checks	10/25/2019	11/7/2024	high
130354	RHEL 7 : sudo (RHSA-2019:3209)	Nessus	Red Hat Local Security Checks	10/29/2019	11/7/2024	high
130412	Fedora 29 : sudo (2019-72755db9c7)	Nessus	Fedora Local Security Checks	10/31/2019	4/16/2024	high
130740	RHEL 6 : sudo (RHSA-2019:3754)	Nessus	Red Hat Local Security Checks	11/8/2019	11/6/2024	high
132205	EulerOS 2.0 SP3 : sudo (EulerOS-SA-2019-2670)	Nessus	Huawei Local Security Checks	12/18/2019	1/19/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high

high