Critical Sudo Vulnerability: Arbitrary Command Execution Risk
Summary
USN-4154-1: sudo vulnerability. Affects sudo versions < 1.8.9p5-1ubuntu1.5+esm2. Fixed in 1.8.9p5-1ubuntu1.5+esm2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Sudo is a widely used command-line utility in Unix-like operating systems that allows users to execute commands with elevated privileges. It is essential for system administration and security management, enabling users to perform tasks that require root access. However, vulnerabilities in Sudo can lead to severe security risks, as they may allow unauthorized users to gain root access and execute arbitrary commands.
Vulnerability Detail
The vulnerability, identified as CVE-2019-14287, was discovered by Joe Vennix. It arises from improper handling of certain user IDs by Sudo. An attacker could exploit this flaw to execute arbitrary commands as the root user, potentially compromising the entire system. This vulnerability affects multiple versions of Sudo across different Ubuntu distributions, making it critical for users to address it promptly.
How To Fix
Minimum fixed version
1.8.9p5-1ubuntu1.5+esm2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade sudoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the Sudo command by modifying the sudoers file. This can be done by running the following command:
sudo visudo
Then, add specific user restrictions to limit who can execute commands with Sudo until the package is updated.
Conclusion
The Sudo vulnerability identified as CVE-2019-14287 poses a significant risk to systems running affected versions of the software. It is crucial for users to update their Sudo packages to the patched versions to mitigate this risk. Additionally, temporary workarounds can be implemented to restrict access until updates are applied.
See every vulnerability recorded for sudo →
FAQ
CVE-2019-14287 is a vulnerability in the Sudo command that allows unauthorized users to execute commands as the root user due to improper handling of user IDs.
The vulnerability affects Sudo versions 1.8.9p5-1ubuntu1.5+esm2, 1.8.16-0ubuntu1.8, and 1.8.21p2-3ubuntu1.1 across various Ubuntu distributions.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to use the Vulert playground without signup.
If immediate updates are not possible, consider restricting access to the Sudo command by editing the sudoers file to limit who can execute commands with Sudo.
If exploited, this vulnerability could allow an attacker to gain root access to the system, leading to unauthorized control, data breaches, and potential system compromise.
References
Related vulnerabilities
Recent vulnerabilities recorded for sudo.
