From Red Hat Security Advisory 2019:3755 :

An update for sudo is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es) :

* sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - Fixes [OraBug: 28747380] sudo does not honor     env_keep-='KRB5CCNAME' after 'sudo -k' 

  - RHEL-6.10.z ERRATUM

  - fixed (CVE-2019-14287) Resolves: rhbz#1760684

An update for sudo is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es) :

* sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has sudo packages installed that are affected by a vulnerability:

  - In Sudo before 1.8.28, an attacker with access to a     Runas ALL sudoer account can bypass certain policy     blacklists and session PAM modules, and can cause     incorrect logging, by invoking sudo with a crafted user     ID. For example, this allows bypass of !root     configuration, and USER= logging, for a sudo -u     \#$((0xffffffff)) command. (CVE-2019-14287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Joe Vennix discovered that sudo, a program designed to provide limited super user privileges to specific users, when configured to allow a user to run commands as an arbitrary user via the ALL keyword in a Runas specification, allows to run commands as root by specifying the user ID -1 or 4294967295. This could allow a user with sufficient sudo privileges to run commands as root even if the Runas specification explicitly disallows root access.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3219 advisory.

  - sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3205 advisory.

  - sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3278 advisory.

  - sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3895 advisory.

  - sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
130737	Oracle Linux 6 : sudo (ELSA-2019-3755)	Nessus	Oracle Linux Local Security Checks	11/8/2019	1/19/2023	high
130884	OracleVM 3.3 / 3.4 : sudo (OVMSA-2019-0050)	Nessus	OracleVM Local Security Checks	11/12/2019	1/20/2023	high
130976	CentOS 6 : sudo (CESA-2019:3755)	Nessus	CentOS Local Security Checks	11/14/2019	1/19/2023	high
133081	NewStart CGSL CORE 5.05 / MAIN 5.05 : sudo Vulnerability (NS-SA-2020-0004)	Nessus	NewStart CGSL Local Security Checks	1/20/2020	1/19/2023	high
146312	Linux sudo Privilege Escalation Vulnerability (direct check)	Nessus	Misc.	2/9/2021	4/23/2024	high
130375	RHEL 7 : sudo (RHSA-2019:3219)	Nessus	Red Hat Local Security Checks	10/30/2019	4/28/2024	high
130251	RHEL 7 : sudo (RHSA-2019:3205)	Nessus	Red Hat Local Security Checks	10/25/2019	4/28/2024	high
130443	RHEL 7 : sudo (RHSA-2019:3278)	Nessus	Red Hat Local Security Checks	11/1/2019	4/27/2024	high
131151	RHEL 6 : sudo (RHSA-2019:3895)	Nessus	Red Hat Local Security Checks	11/20/2019	4/27/2024	high
164695	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.16.1)	Nessus	Misc.	9/6/2022	3/8/2024	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

critical