CVE-2019-14287: canonical ubuntu_linux

CVSS: 9.0v2.0HighModified

AliasesALPINE-CVE-2019-14287MGASA-2019-0298SUSE-SU-2019:14193-1+23 more

Published 17-10-2019Last modified 05-08-2024

Vulnerability summary

CVE-2019-14287 is a high (CVSS 9.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 63.76% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.0/10

010

High · v2.0 (NVD)

EPSS score

63.76%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

OPENSUSE-SU-2024:11413-1 RHBA-2019:3248

Timeline

17-10-2019
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command.

CVSS metrics

6 scores · 5 sources · 3 versions

v3.18.8v3.07.0v2.09.0

EPSS trend

Probability

63.76%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 63.76% on 18-09-2026

18-09-202618-10-2026

EPSS score

63.76%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
referenceUnverified
Exploit Reference (sudo.ws)
Maturity: unknown
exploit-databaselocallinuxUnverified
sudo 1.8.27 - Security Bypass
Maturity: poc

Weaknesses

CWE · root cause

CWE-755Improper Handling of Exceptional ConditionsThe product does not handle or incorrectly handles an exceptional condition.

Affected systems

Suse22 products

sudo&distro=HPE Helion OpenStack 8< 1.8.20p2-3.14.1
sudo&distro=SUSE Enterprise Storage 4< 1.8.10p3-10.23.1
sudo&distro=SUSE Enterprise Storage 5< 1.8.20p2-3.14.1
sudo&distro=SUSE Linux Enterprise Desktop 12 SP4< 1.8.20p2-3.14.1
sudo&distro=SUSE Linux Enterprise Module for Basesystem 15< 1.8.22-4.6.1

Show all 22

Redhat13 products

enterprise_linux8.0
enterprise_linux_desktop6.0 | 7.0
enterprise_linux_eus7.5 | 7.6 | 7.7 | 8.1 | 8.2 | 8.4
enterprise_linux_server5.0 | 6.0 | 7.0
enterprise_linux_server_aus6.5 | 6.6 | 7.2 | 7.3 | 7.4 | 7.6 | 7.7 | 8.2 | 8.4

Show all 13

Opensuse3 products

leapEOL15.0 | 15.1
sudo&distro=openSUSE Leap 15.0< 1.8.22-lp150.8.1
sudo&distro=openSUSE Leap 15.1< 1.8.22-lp151.5.3.1

Debian2 products

sudo< 1.8.27-1.1 | < 1.8.19p1-2.1+deb9u1 | < 1.8.27-1+deb10u1 | < 1.8.10p3-1+deb8u6
debian_linuxEOL8.0 | 9.0 | 10.0

Alpine1 product

sudo< 1.8.27-r1 | < 1.8.28-r0 | < 1.8.23-r3 | < 1.8.25_p1-r3

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04 | 16.04 | 18.04 | 19.04

Fedoraproject1 product

fedoraEOL29 | 30 | 31

Mageia1 product

sudo< 1.8.28-1.mga7

Netapp1 product

element_software_management_nodena

Sudo_project1 product

sudo< 1.8.28

Ubuntu1 product

sudo< 1.8.9p5-1ubuntu1.5+esm2 | < 1.8.16-0ubuntu1.8 | < 1.8.21p2-3ubuntu1.1

11 vendors · 47 products

References

73 links

www.openwall.com/lists/oss-security/2019/10/14/1Mailing ListX Refsource MLISTExploitThird Party Advisory
usn.ubuntu.com/4154-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.debian.org/security/2019/dsa-4543Vendor AdvisoryX Refsource DEBIANThird Party Advisory
seclists.org/bugtraq/2019/Oct/21Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory
seclists.org/bugtraq/2019/Oct/20Mailing ListX Refsource BUGTRAQIssue TrackingThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-10/msg00042.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
packetstormsecurity.com/files/154853/Slackware-Security-Advisory-sudo-Updates.htmlX Refsource MISCThird Party AdvisoryVDB Entry
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
www.sudo.ws/alerts/minus_1_uid.htmlX Refsource CONFIRMExploitVendor AdvisoryWEBARTICLEREPORT
lists.opensuse.org/opensuse-security-announce/2019-10/msg00047.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory

Show all 73 references

security.netapp.com/advisory/ntap-20191017-0003/X Refsource CONFIRMThird Party Advisory
www.openwall.com/lists/oss-security/2019/10/15/2Mailing ListX Refsource MLISTPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2019/10/msg00022.htmlMailing ListX Refsource MLISTThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
support.f5.com/csp/article/K53746212?utm_source=f5support&amp%3Butm_medium=RSSX Refsource CONFIRM
www.openwall.com/lists/oss-security/2019/10/24/1Mailing ListX Refsource MLISTThird Party Advisory
access.redhat.com/errata/RHSA-2019:3197Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2019:3205Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2019:3204Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2019:3209Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2019:3219Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.openwall.com/lists/oss-security/2019/10/29/3Mailing ListX Refsource MLISTThird Party Advisory
lists.fedoraproject.org/archives/…Vendor AdvisoryX Refsource FEDORA
access.redhat.com/errata/RHSA-2019:3278Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
resources.whitesourcesoftware.com/blog-whitesource/new-vulnerability-in-sudo-cve-2019-14287X Refsource MISCThird Party Advisory
access.redhat.com/errata/RHSA-2019:3694Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2019:3755Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2019:3754Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2019:3895Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2019:3916Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHBA-2019:3248Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2019:3941Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2019:4191Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03976en_usX Refsource CONFIRMThird Party Advisory
access.redhat.com/errata/RHSA-2020:0388Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
security.gentoo.org/glsa/202003-12Vendor AdvisoryX Refsource GENTOOThird Party Advisory
www.openwall.com/lists/oss-security/2021/09/14/2Mailing ListX Refsource MLISTThird Party Advisory
security.alpinelinux.org/vuln/CVE-2019-14287Advisory
advisories.mageia.org/MGASA-2019-0298.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=25568REPORT
www.sudo.ws/stable.htmlWEB
www.suse.com/support/update/announcement/2019/suse-su-201914193-1/Advisory
bugzilla.suse.com/1153674REPORT
www.suse.com/security/cve/CVE-2019-14287WEB
www.suse.com/support/update/announcement/2019/suse-su-20192656-1/Advisory
www.suse.com/support/update/announcement/2019/suse-su-20192666-1/Advisory
www.suse.com/support/update/announcement/2019/suse-su-20192667-1/Advisory
www.suse.com/support/update/announcement/2019/suse-su-20192668-1/Advisory
bugzilla.suse.com/1053911REPORT
bugzilla.suse.com/1058297REPORT
bugzilla.suse.com/1068003REPORT
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1760531REPORT
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3197.jsonAdvisory
access.redhat.com/security/cve/CVE-2019-14287REPORT
www.cve.org/CVERecord?id=CVE-2019-14287AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2019-14287Advisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3204.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3205.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3209.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3219.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3278.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3694.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3754.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3755.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3895.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4191.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0388.jsonAdvisory
ubuntu.com/security/CVE-2019-14287REPORT
ubuntu.com/security/notices/USN-4154-1Advisory
security-tracker.debian.org/tracker/CVE-2019-14287Advisory
lists.opensuse.org/archives/…Advisory
lists.opensuse.org/archives/…Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities