Red Hat Security Advisory

RHSA-2019:3209

sudo security update

Released 2019-10-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.4) sudo-1.8.19p2-12.el7_4.1
Red Hat Enterprise Linux Server E4S (v. 7.4) sudo-1.8.19p2-12.el7_4.1
Red Hat Enterprise Linux Server Optional AUS (v. 7.4) sudo-devel-1.8.19p2-12.el7_4.1
Red Hat Enterprise Linux Server Optional E4S (v. 7.4) sudo-devel-1.8.19p2-12.el7_4.1
Red Hat Enterprise Linux Server Optional TUS (v. 7.4) sudo-devel-1.8.19p2-12.el7_4.1
Red Hat Enterprise Linux Server TUS (v. 7.4) sudo-1.8.19p2-12.el7_4.1

Fixes 1 record

TI-2019-10640 CVE-2019-14287 · GHSA-33h3-qhjg-4qmf

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass…

HIGH 74

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.63764 Published 2019-10-17 Fixed CWE-755