The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3219 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update for sudo is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es) :

* sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3278 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - sudo: Privilege escalation via 'Runas' specification     with 'ALL' keyword (CVE-2019-14287)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3755 advisory.

    [1.8.6p3-29.0.1.el6_10.2]
    - Fixes [OraBug: 28747380]       sudo does not honor env_keep-='KRB5CCNAME' after 'sudo -k' (isaac.chen@oracle.com)

    [1.8.6p3-29.2]
    - RHEL-6.10.z ERRATUM
    - fixed CVE-2019-14287       Resolves: rhbz#1760684

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Fixes [OraBug: 28747380] sudo does not honor     env_keep-='KRB5CCNAME' after 'sudo -k' 

  - RHEL-6.10.z ERRATUM

  - fixed (CVE-2019-14287) Resolves: rhbz#1760684

An update for sudo is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es) :

* sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3895 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has sudo packages installed that are affected by a vulnerability:

  - In Sudo before 1.8.28, an attacker with access to a     Runas ALL sudoer account can bypass certain policy     blacklists and session PAM modules, and can cause     incorrect logging, by invoking sudo with a crafted user     ID. For example, this allows bypass of !root     configuration, and USER= logging, for a sudo -u     \#$((0xffffffff)) command. (CVE-2019-14287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - In Sudo before 1.8.28, an attacker with access to a     Runas ALL sudoer account can bypass certain policy     blacklists and session PAM modules, and can cause     incorrect logging, by invoking sudo with a crafted user     ID. For example, this allows bypass of !root     configuration, and USER= logging, for a 'sudo -u     \#$((0xffffffff))' command.(CVE-2019-14287)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Joe Vennix discovered that sudo, a program designed to provide limited super user privileges to specific users, when configured to allow a user to run commands as an arbitrary user via the ALL keyword in a Runas specification, allows to run commands as root by specifying the user ID -1 or 4294967295. This could allow a user with sufficient sudo privileges to run commands as root even if the Runas specification explicitly disallows root access.

ID	Name	Product	Family	Published	Updated	Severity
130375	RHEL 7 : sudo (RHSA-2019:3219)	Nessus	Red Hat Local Security Checks	10/30/2019	11/7/2024	high
130435	CentOS 7 : sudo (CESA-2019:3197)	Nessus	CentOS Local Security Checks	11/1/2019	1/19/2023	high
130443	RHEL 7 : sudo (RHSA-2019:3278)	Nessus	Red Hat Local Security Checks	11/1/2019	11/7/2024	high
130618	Scientific Linux Security Update : sudo on SL6.x i386/x86_64 (20191106)	Nessus	Scientific Linux Local Security Checks	11/7/2019	1/20/2023	high
130737	Oracle Linux 6 : sudo (ELSA-2019-3755)	Nessus	Oracle Linux Local Security Checks	11/8/2019	10/22/2024	high
130884	OracleVM 3.3 / 3.4 : sudo (OVMSA-2019-0050)	Nessus	OracleVM Local Security Checks	11/12/2019	1/20/2023	high
130976	CentOS 6 : sudo (CESA-2019:3755)	Nessus	CentOS Local Security Checks	11/14/2019	1/19/2023	high
131151	RHEL 6 : sudo (RHSA-2019:3895)	Nessus	Red Hat Local Security Checks	11/20/2019	11/7/2024	high
133081	NewStart CGSL CORE 5.05 / MAIN 5.05 : sudo Vulnerability (NS-SA-2020-0004)	Nessus	NewStart CGSL Local Security Checks	1/20/2020	1/19/2023	high
134745	EulerOS Virtualization 3.0.2.2 : sudo (EulerOS-SA-2020-1279)	Nessus	Huawei Local Security Checks	3/20/2020	1/18/2023	high
146312	Linux sudo Privilege Escalation Vulnerability (direct check)	Nessus	Misc.	2/9/2021	10/20/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high