{"id":"CVE-2019-14287","aliases":["ALPINE-CVE-2019-14287","BELL-CVE-2019-14287","DEBIAN-CVE-2019-14287","DLA-1964-1","DSA-4543-1","EUVD-2019-5514","GHSA-33h3-qhjg-4qmf","MGASA-2019-0298","RHBA-2019:3248","RHSA-2019:3197","RHSA-2019:3204","RHSA-2019:3205","RHSA-2019:3209","RHSA-2019:3219","RHSA-2019:3278","RHSA-2019:3694","RHSA-2019:3754","RHSA-2019:3755","RHSA-2019:3895","RHSA-2019:4191","RHSA-2020:0388","SUSE-SU-2019:14193-1","SUSE-SU-2019:2656-1","SUSE-SU-2019:2666-1","SUSE-SU-2019:2667-1","SUSE-SU-2019:2668-1","UBUNTU-CVE-2019-14287","USN-4154-1","openSUSE-SU-2019:2316-1","openSUSE-SU-2019:2333-1","openSUSE-SU-2024:11413-1"],"status":"published","title":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.63764,"percentile":0.99226,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-755"],"published":"2019-10-14T00:00:00Z","modified":"2026-11-03T06:31:50Z","exploits":[{"source":"pocgithub","id":"CashWilliams/CVE-2019-14287-demo","title":"CashWilliams/CVE-2019-14287-demo","date":"2019-10-15","url":"https://github.com/CashWilliams/CVE-2019-14287-demo"},{"source":"exploitdb","id":"EDB-47502","title":"sudo 1.8.27 - Security Bypass","type":"local","platform":"linux","date":"2019-10-15","url":"https://www.exploit-db.com/exploits/47502"},{"source":"pocgithub","id":"FauxFaux/sudo-cve-2019-14287","title":"FauxFaux/sudo-cve-2019-14287","date":"2019-10-15","url":"https://github.com/FauxFaux/sudo-cve-2019-14287"},{"source":"pocgithub","id":"n0w4n/CVE-2019-14287","title":"n0w4n/CVE-2019-14287","date":"2019-10-15","url":"https://github.com/n0w4n/CVE-2019-14287"},{"source":"pocgithub","id":"gurneesh/CVE-2019-14287-write-up","title":"gurneesh/CVE-2019-14287-write-up","date":"2019-10-16","url":"https://github.com/gurneesh/CVE-2019-14287-write-up"},{"source":"pocgithub","id":"shallvhack/Sudo-Security-Bypass-CVE-2019-14287","title":"shallvhack/Sudo-Security-Bypass-CVE-2019-14287","date":"2019-10-18","url":"https://github.com/shallvhack/Sudo-Security-Bypass-CVE-2019-14287"},{"source":"pocgithub","id":"huang919/cve-2019-14287-PPT","title":"huang919/cve-2019-14287-PPT","date":"2019-10-28","url":"https://github.com/huang919/cve-2019-14287-PPT"},{"source":"pocgithub","id":"wenyu1999/sudo-","title":"wenyu1999/sudo-","date":"2019-11-11","url":"https://github.com/wenyu1999/sudo-"},{"source":"pocgithub","id":"Sindadziy/cve-2019-14287","title":"Sindadziy/cve-2019-14287","date":"2019-11-12","url":"https://github.com/Sindadziy/cve-2019-14287"},{"source":"pocgithub","id":"Sindayifu/CVE-2019-14287-CVE-2014-6271","title":"Sindayifu/CVE-2019-14287-CVE-2014-6271","date":"2019-11-13","url":"https://github.com/Sindayifu/CVE-2019-14287-CVE-2014-6271"},{"source":"pocgithub","id":"CMNatic/Dockerized-CVE-2019-14287","title":"CMNatic/Dockerized-CVE-2019-14287","date":"2020-02-09","url":"https://github.com/CMNatic/Dockerized-CVE-2019-14287"},{"source":"pocgithub","id":"axax002/sudo-vulnerability-CVE-2019-14287","title":"axax002/sudo-vulnerability-CVE-2019-14287","date":"2020-04-26","url":"https://github.com/axax002/sudo-vulnerability-CVE-2019-14287"},{"source":"pocgithub","id":"HussyCool/CVE-2019-14287-IT18030372-","title":"HussyCool/CVE-2019-14287-IT18030372-","date":"2020-05-11","url":"https://github.com/HussyCool/CVE-2019-14287-IT18030372-"},{"source":"pocgithub","id":"sachinthadesilva/Exploit-CVE-2019-14287","title":"sachinthadesilva/Exploit-CVE-2019-14287","date":"2020-05-11","url":"https://github.com/sachinthadesilva/Exploit-CVE-2019-14287"},{"source":"pocgithub","id":"DewmiApsara/CVE-2019-14287","title":"DewmiApsara/CVE-2019-14287","date":"2020-05-12","url":"https://github.com/DewmiApsara/CVE-2019-14287"},{"source":"pocgithub","id":"ShianTrish/sudo-Security-Bypass-vulnerability-CVE-2019-14287","title":"ShianTrish/sudo-Security-Bypass-vulnerability-CVE-2019-14287","date":"2020-05-12","url":"https://github.com/ShianTrish/sudo-Security-Bypass-vulnerability-CVE-2019-14287"},{"source":"pocgithub","id":"ejlevin99/Sudo-Security-Bypass-Vulnerability","title":"ejlevin99/Sudo-Security-Bypass-Vulnerability","date":"2020-05-12","url":"https://github.com/ejlevin99/Sudo-Security-Bypass-Vulnerability"},{"source":"pocgithub","id":"janod313/-CVE-2019-14287-SUDO-bypass-vulnerability","title":"janod313/-CVE-2019-14287-SUDO-bypass-vulnerability","date":"2020-05-12","url":"https://github.com/janod313/-CVE-2019-14287-SUDO-bypass-vulnerability"},{"source":"pocgithub","id":"thinuri99/Sudo-Security-Bypass-Vulnerability-CVE-2019-14287-","title":"thinuri99/Sudo-Security-Bypass-Vulnerability-CVE-2019-14287-","date":"2020-05-12","url":"https://github.com/thinuri99/Sudo-Security-Bypass-Vulnerability-CVE-2019-14287-"},{"source":"pocgithub","id":"M108Falcon/Sudo-CVE-2019-14287","title":"M108Falcon/Sudo-CVE-2019-14287","date":"2020-09-18","url":"https://github.com/M108Falcon/Sudo-CVE-2019-14287"},{"source":"pocgithub","id":"edsonjt81/CVE-2019-14287-","title":"edsonjt81/CVE-2019-14287-","date":"2021-04-25","url":"https://github.com/edsonjt81/CVE-2019-14287-"},{"source":"pocgithub","id":"DularaAnushka/Linux-Privilege-Escalation-using-Sudo-Rights","title":"DularaAnushka/Linux-Privilege-Escalation-using-Sudo-Rights","date":"2021-05-20","url":"https://github.com/DularaAnushka/Linux-Privilege-Escalation-using-Sudo-Rights"},{"source":"pocgithub","id":"h3x0v3rl0rd/CVE-2019-14287","title":"h3x0v3rl0rd/CVE-2019-14287","date":"2021-06-17","url":"https://github.com/h3x0v3rl0rd/CVE-2019-14287"},{"source":"pocgithub","id":"Hasintha-98/Sudo-Vulnerability-Exploit-CVE-2019-14287","title":"Hasintha-98/Sudo-Vulnerability-Exploit-CVE-2019-14287","date":"2021-10-13","url":"https://github.com/Hasintha-98/Sudo-Vulnerability-Exploit-CVE-2019-14287"},{"source":"pocgithub","id":"MariliaMeira/CVE-2019-14287","title":"MariliaMeira/CVE-2019-14287","date":"2022-10-12","url":"https://github.com/MariliaMeira/CVE-2019-14287"},{"source":"pocgithub","id":"lemonadern/poc-cve-2019-14287","title":"lemonadern/poc-cve-2019-14287","date":"2024-10-13","url":"https://github.com/lemonadern/poc-cve-2019-14287"}],"exploits_more":2,"fixes":[{"ecosystem":"Alpine:v3.10","package":"sudo","fixed_in":["1.8.27-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"sudo","fixed_in":["1.8.28-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"sudo","fixed_in":["1.8.23-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"sudo","fixed_in":["1.8.25_p1-r3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.8.27-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.8.27-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.8.27-1.1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"sudo","fixed_in":["1.8.10p3-1+deb8u6"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"sudo","fixed_in":["1.8.19p1-2.1+deb9u1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"sudo","fixed_in":["1.8.27-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"sudo","fixed_in":["1.8.28-1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"sudo","fixed_in":["0:1.8.19p2-14.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-14.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"sudo-devel","fixed_in":["0:1.8.19p2-14.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::server","package":"sudo","fixed_in":["0:1.8.19p2-14.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::server","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-14.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.5::server","package":"sudo-devel","fixed_in":["0:1.8.19p2-14.el7_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo","fixed_in":["0:1.8.23-3.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo-debuginfo","fixed_in":["0:1.8.23-3.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo-devel","fixed_in":["0:1.8.23-3.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo","fixed_in":["0:1.8.23-3.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-3.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo-devel","fixed_in":["0:1.8.23-3.el7_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-devel","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo-devel","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo-devel","fixed_in":["0:1.8.19p2-12.el7_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"sudo","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"sudo","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo-devel","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"sudo-devel","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.3::server","package":"sudo-devel","fixed_in":["0:1.8.6p7-23.el7_3.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.2::server","package":"sudo","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.2::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.2::server","package":"sudo","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.2::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo-devel","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.2::server","package":"sudo-devel","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.2::server","package":"sudo-devel","fixed_in":["0:1.8.6p7-17.el7_2.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","fixed_in":["0:1.8.25p1-8.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.25p1-8.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.25p1-8.el8_1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"sudo","fixed_in":["0:1.8.6p3-15.el6_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p3-15.el6_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.6::server","package":"sudo-devel","fixed_in":["0:1.8.6p3-15.el6_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo-debuginfo","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo-devel","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo-debuginfo","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo-devel","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo-devel","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo-debuginfo","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo-devel","fixed_in":["0:1.8.6p3-29.el6_10.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"sudo","fixed_in":["0:1.8.6p3-12.el6_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p3-12.el6_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:6.5::server","package":"sudo-devel","fixed_in":["0:1.8.6p3-12.el6_5.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:5","package":"sudo","fixed_in":["0:1.7.2p1-31.el5_11.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:5","package":"sudo-debuginfo","fixed_in":["0:1.7.2p1-31.el5_11.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"sudo","fixed_in":["0:1.8.25p1-4.el8_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.25p1-4.el8_0.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.25p1-4.el8_0.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"sudo","fixed_in":["1.7.6p2-0.30.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"sudo","fixed_in":["1.7.6p2-0.30.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"sudo","fixed_in":["1.8.22-4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"sudo","fixed_in":["1.8.22-4.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 5","package":"sudo","fixed_in":["1.8.20p2-3.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"sudo","fixed_in":["1.8.10p3-10.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"sudo","fixed_in":["1.8.10p3-10.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"sudo","fixed_in":["1.8.10p3-10.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","fixed_in":["1.8.10p3-10.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"sudo","fixed_in":["1.8.10p3-10.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"sudo","fixed_in":["1.8.10p3-2.28.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"sudo","fixed_in":["1.8.10p3-2.28.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","fixed_in":["1.8.9p5-1ubuntu1.5+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"sudo","fixed_in":["1.8.16-0ubuntu1.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"sudo","fixed_in":["1.8.21p2-3ubuntu1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"sudo","fixed_in":["1.8.22-lp151.5.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"sudo","fixed_in":["1.8.22-lp150.8.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.25_p1-r3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1.1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-1+deb8u6"}]}],"versions":["1.8.10p3-1+deb8u2","1.8.10p3-1+deb8u3","1.8.10p3-1+deb8u4","1.8.10p3-1+deb8u5"]},{"source":"osv","ecosystem":"Debian:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.19p1-2.1+deb9u1"}]}],"versions":["1.8.19p1-2.1"]},{"source":"osv","ecosystem":"Debian:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1+deb10u1"}]}],"versions":["1.8.27-1"]},{"source":"osv","ecosystem":"Mageia:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.28-1.mga7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-15.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-release-virtualization-host-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-15.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20191022.0.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-20191022.0.el7_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update-placeholder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2-15.1.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-14.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-14.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-14.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-14.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-14.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.5::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-14.el7_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.3::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.3::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.2::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.2::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.2::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.2::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.2::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.2::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-15.el6_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-15.el6_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.6::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-15.el6_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:6.5::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-12.el6_5.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2p1-31.el5_11.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:5","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2p1-31.el5_11.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-4.el8_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-4.el8_0.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-4.el8_0.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6p2-0.30.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.6p2-0.30.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-2.28.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-2.28.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9p5-1ubuntu1.5+esm2"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.8"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.1"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9p5-1ubuntu1.5+esm2"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.8"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.1"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-lp151.5.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-lp150.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7p2-1.4"}]}],"bundled":11}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"netapp","product":"element_software_management_node"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"},{"vendor":"redhat","product":"openshift_container_platform"},{"vendor":"redhat","product":"virtualization"},{"vendor":"sudo_project","product":"sudo"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/10/14/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"https://usn.ubuntu.com/4154-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4543","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://seclists.org/bugtraq/2019/Oct/21","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"https://seclists.org/bugtraq/2019/Oct/20","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Issue Tracking","Mailing List","Third Party Advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00042.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/154853/Slackware-Security-Advisory-sudo-Updates.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IP7SIOAVLSKJGMTIULX52VQUPTVSC43U/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.sudo.ws/alerts/minus_1_uid.html","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Vendor Advisory","evidence","web","article","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00047.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20191017-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2019/10/15/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00022.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUVAOZBYUHZS56A5FQSCDVGXT7PW7FL2/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://support.f5.com/csp/article/K53746212?utm_source=f5support\u0026amp%3Butm_medium=RSS","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2019/10/24/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3197","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3205","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3204","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3209","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3219","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2019/10/29/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPLAM57TPJQGKQMNG6RHFBLACD6K356N/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3278","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://resources.whitesourcesoftware.com/blog-whitesource/new-vulnerability-in-sudo-cve-2019-14287","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3694","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3755","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3754","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3895","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3916","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2019:3248","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:3941","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:4191","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US\u0026docId=emr_na-hpesbns03976en_us","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0388","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202003-12","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/09/14/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14287","tags":["advisory"]},{"url":"https://support.f5.com/csp/article/K53746212?utm_source=f5support\u0026amp;utm_medium=RSS"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUVAOZBYUHZS56A5FQSCDVGXT7PW7FL2"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IP7SIOAVLSKJGMTIULX52VQUPTVSC43U"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NPLAM57TPJQGKQMNG6RHFBLACD6K356N"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TUVAOZBYUHZS56A5FQSCDVGXT7PW7FL2"},{"url":"https://security.netapp.com/advisory/ntap-20191017-0003"},{"url":"https://usn.ubuntu.com/4154-1"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IP7SIOAVLSKJGMTIULX52VQUPTVSC43U"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPLAM57TPJQGKQMNG6RHFBLACD6K356N"},{"url":"https://github.com/advisories/GHSA-33h3-qhjg-4qmf"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-14287","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-14287","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-14287","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0298.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25568","tags":["report"]},{"url":"https://www.sudo.ws/stable.html#1.8.28","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1761720","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhba-2019_3248.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-1125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1724389","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1125","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760531","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14287","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3197.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3204.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3205.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3209.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3219.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3278.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3694.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3754.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3755.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3895.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_4191.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0388.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914193-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1153674","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14287","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192656-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192666-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192667-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192668-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1053911","tags":["report"]},{"url":"https://bugzilla.suse.com/1058297","tags":["report"]},{"url":"https://bugzilla.suse.com/1068003","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14287","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4154-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5CZZAG7XSZAR6GDRIODAMMG67QVMCPCH/#5CZZAG7XSZAR6GDRIODAMMG67QVMCPCH","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/BSBNENZR57LOHEQOPC2JHBLICDY4PCZ5/#BSBNENZR57LOHEQOPC2JHBLICDY4PCZ5","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-4158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3156","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-14287","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","status":"published","published":"2019-10-17T17:03:28Z","modified":"2024-08-05T00:12:43.383Z","updated_at":"2026-11-02T14:20:18.085548Z"}],"euvd":[{"id":"EUVD-2019-5514","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","status":"published","published":"2019-10-17T17:03:28Z","modified":"2024-08-05T00:12:43Z","updated_at":"2026-11-03T02:40:40.053391Z"}],"ghsa":[{"id":"GHSA-33h3-qhjg-4qmf","title":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","status":"published","published":"2022-05-24T16:59:16Z","modified":"2024-04-04T02:30:48Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:56:08.751002Z"}],"nvd":[{"id":"CVE-2019-14287","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","status":"published","published":"2019-10-17T18:15:12.33Z","modified":"2026-06-17T02:18:07.27Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:05:31.860711Z"}],"osv":[{"id":"ALPINE-CVE-2019-14287","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","status":"published","published":"2019-10-17T18:15:12.33Z","modified":"2026-11-03T06:31:50.882926865Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"BELL-CVE-2019-14287","title":"CVE-2019-14287 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:37.449095Z","modified":"2026-01-26T09:48:57.342066Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-14287","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","status":"published","published":"2019-10-17T18:15:12.33Z","modified":"2026-10-24T10:30:28.441609507Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"DEBIAN-CVE-2019-14287","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","status":"published","published":"2019-10-17T18:15:12.33Z","modified":"2026-09-21T07:00:09.592638736Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"RHBA-2019:3248","title":"Red Hat Bug Fix Advisory: redhat-virtualization-host security update","status":"published","published":"2024-09-13T19:48:08Z","modified":"2026-06-28T10:28:00Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2019:3197","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:13:24Z","modified":"2026-06-28T10:32:37Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3204","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:13:36Z","modified":"2026-06-28T10:32:39Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3205","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:13:31Z","modified":"2026-06-28T10:32:40Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3209","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:14:10Z","modified":"2026-06-28T10:32:41Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3219","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:13:17Z","modified":"2026-06-28T10:32:44Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3278","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:13:29Z","modified":"2026-06-28T10:32:47Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:3694","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:13:17Z","modified":"2026-06-28T10:32:58Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2019:3754","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:14:02Z","modified":"2026-06-28T10:33:04Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2019:3755","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:13:56Z","modified":"2026-06-28T10:33:04Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2019:3895","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:13:30Z","modified":"2026-06-28T10:33:21Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2019:4191","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:15:17Z","modified":"2026-06-28T10:33:41Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0388","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T16:14:45Z","modified":"2026-06-28T10:34:35Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2019-14287","description":"In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a \"sudo -u \\#$((0xffffffff))\" command.","status":"published","published":"2019-10-14T15:00:00Z","modified":"2026-02-04T02:27:35.234444Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:19.6877Z"},{"id":"DLA-1964-1","title":"sudo - security update","status":"published","published":"2019-10-17T00:00:00Z","modified":"2026-03-09T01:22:03.101684Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DSA-4543-1","title":"sudo - security update","status":"published","published":"2019-10-14T00:00:00Z","modified":"2026-03-09T02:10:19.002734Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0298","title":"Updated sudo packages fix security vulnerability","description":"The updated packages fix a security vulnerability:\n\nPotential bypass of Runas user restrictions. (CVE-2019-14287)\n","status":"published","published":"2019-10-16T22:22:41Z","modified":"2026-04-16T04:42:23.26953792Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2316-1","title":"Security update for sudo","description":"This update for sudo fixes the following issue:\n\n- CVE-2019-14287: Fixed an issue where a user with sudo privileges \n  that allowed them to run commands with an arbitrary uid, could \n  run commands as root, despite being forbidden to do so in sudoers\n  (bsc#1153674).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-15T04:53:54Z","modified":"2026-02-04T03:19:07.612481Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2333-1","title":"Security update for sudo","description":"This update for sudo fixes the following issue:\n\n- CVE-2019-14287: Fixed an issue where a user with sudo privileges \n  that allowed them to run commands with an arbitrary uid, could \n  run commands as root, despite being forbidden to do so in sudoers\n  (bsc#1153674).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-17T08:21:26Z","modified":"2026-02-04T03:20:36.768803Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11413-1","title":"sudo-1.9.7p2-1.4 on GA media","description":"These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:46:24.949279Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:14193-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674).\n","status":"published","published":"2019-10-18T14:20:07Z","modified":"2026-02-04T04:05:02.454817Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:2656-1","title":"Security update for sudo","description":"This update for sudo fixes the following issue:\n\n- CVE-2019-14287: Fixed an issue where a user with sudo privileges \n  that allowed them to run commands with an arbitrary uid, could \n  run commands as root, despite being forbidden to do so in sudoers\n  (bsc#1153674).\n","status":"published","published":"2019-10-14T15:02:27Z","modified":"2025-05-02T04:08:49.380997Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2666-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\nSecurity issue fixed: \t  \n\n- CVE-2019-14287: Fixed an issue where a user with sudo privileges\n  that allowed them to run commands with an arbitrary uid, could\n  run commands as root, despite being forbidden to do so in sudoers\n  (bsc#1153674).\n\n","status":"published","published":"2019-10-15T11:15:41Z","modified":"2026-02-04T03:43:26.34256Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2667-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2019-14287: Fixed an issue where a user with sudo privileges \n  that allowed them to run commands with an arbitrary uid, could \n  run commands as root, despite being forbidden to do so in sudoers\n  (bsc#1153674).\n","status":"published","published":"2019-10-15T11:16:01Z","modified":"2026-02-04T04:19:41.277164Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2668-1","title":"Security update for sudo","description":"This update for sudo provides the following fix:\n\nSecurity issue fixed:     \n\n- CVE-2019-14287: Fixed an issue where a user with sudo privileges \n  that allowed them to run commands with an arbitrary uid, could \n  run commands as root, despite being forbidden to do so in sudoers\n  (bsc#1153674).\n\nOther issues fixed:     \n\n- Cache resolved group names as calling getgrgid() is expensive and \n  on systems connected to AD with many users, groups or sudo rules \n  it causes sudo to take a long time to run (bsc#1068003).\n- Disable insults by default at build time. For new installations this \n  was done via sudoers file, but when upgrading from previous versions \n  it would accidentally be enabled (bsc#1053911).\n- Enable support for zlib compressed I/O logs (bsc#1058297).\n","status":"published","published":"2019-10-15T11:16:12Z","modified":"2026-02-04T04:02:01.651641Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-4154-1","title":"sudo vulnerability","description":"Joe Vennix discovered that Sudo incorrectly handled\ncertain user IDs. An attacker could potentially exploit this\nto execute arbitrary commands as the root user.\n","status":"published","published":"2019-10-14T14:46:34Z","modified":"2026-06-29T13:47:41.220929213Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}