According to the version of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In Sudo before 1.8.28, an attacker with access to a     Runas ALL sudoer account can bypass certain policy     blacklists and session PAM modules, and can cause     incorrect logging, by invoking sudo with a crafted user     ID. For example, this allows bypass of !root     configuration, and USER= logging, for a 'sudo -u     \#$((0xffffffff))' command.(CVE-2019-14287)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sudo fixes the following issue :

CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3755 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

When sudo is configured to allow a user to run commands as an arbitrary user via the ALL keyword in a Runas specification, it is possible to run commands as root by specifying the user ID -1 or 4294967295.

This can be used by a user with sufficient sudo privileges to run commands as root even if the Runas specification explicitly disallows root access as long as the ALL keyword is listed first in the Runas specification. (CVE-2019-14287)

Further details can be found here:
https://www.sudo.ws/alerts/minus_1_uid.html

A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root.(CVE-2017-1000367)

It was found that the original fix for CVE-2017-1000367 was incomplete. A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root.(CVE-2017-1000368)

- Rebase to 1.8.28

  - Fixed CVE-2019-14287

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for sudo fixes the following issue :

  - CVE-2019-14287: Fixed an issue where a user with sudo     privileges that allowed them to run commands with an     arbitrary uid, could run commands as root, despite being     forbidden to do so in sudoers (bsc#1153674).

This update was imported from the SUSE:SLE-15:Update update project.

This update for sudo provides the following fix :

Security issue fixed :

CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674).

Other issues fixed: Cache resolved group names as calling getgrgid() is expensive and on systems connected to AD with many users, groups or sudo rules it causes sudo to take a long time to run (bsc#1068003).

Disable insults by default at build time. For new installations this was done via sudoers file, but when upgrading from previous versions it would accidentally be enabled (bsc#1053911).

Enable support for zlib compressed I/O logs (bsc#1058297).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3204 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

When sudo is configured to allow a user to run commands as an arbitrary user via the ALL keyword in a Runas specification, it is possible to run commands as root by specifying the user ID -1 or 4294967295.

This can be used by a user with sufficient sudo privileges to run commands as root even if the Runas specification explicitly disallows root access as long as the ALL keyword is listed first in the Runas specification. (CVE-2019-14287)

Further details can be found here:
https://www.sudo.ws/alerts/minus_1_uid.html

ID	Name	Product	Family	Published	Updated	Severity
130653	EulerOS 2.0 SP5 : sudo (EulerOS-SA-2019-2191)	Nessus	Huawei Local Security Checks	11/8/2019	1/19/2023	high
131370	EulerOS 2.0 SP8 : sudo (EulerOS-SA-2019-2304)	Nessus	Huawei Local Security Checks	11/27/2019	1/19/2023	high
129880	SUSE SLED15 / SLES15 Security Update : sudo (SUSE-SU-2019:2656-1)	Nessus	SuSE Local Security Checks	10/15/2019	1/20/2023	high
130741	RHEL 6 : sudo (RHSA-2019:3755)	Nessus	Red Hat Local Security Checks	11/8/2019	11/6/2024	high
129851	Amazon Linux 2 : sudo (ALAS-2019-1315)	Nessus	Amazon Linux Local Security Checks	10/15/2019	1/23/2023	high
130412	Fedora 29 : sudo (2019-72755db9c7)	Nessus	Fedora Local Security Checks	10/31/2019	4/16/2024	high
130049	openSUSE Security Update : sudo (openSUSE-2019-2333)	Nessus	SuSE Local Security Checks	10/18/2019	4/17/2024	high
129963	SUSE SLES12 Security Update : sudo (SUSE-SU-2019:2668-1)	Nessus	SuSE Local Security Checks	10/16/2019	1/20/2023	high
130250	RHEL 7 : sudo (RHSA-2019:3204)	Nessus	Red Hat Local Security Checks	10/25/2019	11/6/2024	high
129852	Amazon Linux AMI : sudo (ALAS-2019-1309)	Nessus	Amazon Linux Local Security Checks	10/15/2019	1/23/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high