Sudo Privilege Escalation CVE-2019-14287 - Builtin

calendar Oct 23, 2025 · attack.defense-evasion attack.privilege-escalation attack.t1068 attack.t1548.003 cve.2019-14287  ·
Share on: linkedin copy

Detects users trying to exploit sudo vulnerability reported in CVE-2019-14287

Sigma rule (View on GitHub)

 1title: Sudo Privilege Escalation CVE-2019-14287 - Builtin
 2id: 7fcc54cb-f27d-4684-84b7-436af096f858
 3related:
 4    - id: f74107df-b6c6-4e80-bf00-4170b658162b
 5      type: derived
 6status: test
 7description: Detects users trying to exploit sudo vulnerability reported in CVE-2019-14287
 8references:
 9    - https://www.openwall.com/lists/oss-security/2019/10/14/1
10    - https://access.redhat.com/security/cve/cve-2019-14287
11    - https://twitter.com/matthieugarin/status/1183970598210412546
12author: Florian Roth (Nextron Systems)
13date: 2019-10-15
14modified: 2022-11-26
15tags:
16    - attack.defense-evasion
17    - attack.privilege-escalation
18    - attack.t1068
19    - attack.t1548.003
20    - cve.2019-14287
21logsource:
22    product: linux
23    service: sudo
24detection:
25    selection_user:
26        USER:
27            - '#-*'
28            - '#*4294967295'
29    condition: selection_user
30falsepositives:
31    - Unlikely
32level: critical

References

  • oss-security - Sudo: CVE-2019-14287

    [ ] [thread-next>] [day] [month] [year] [list] Message-ID: Date: Mon, 14 Oct 2019 09:00:31 -0600 From: "Todd C. Miller" To: oss-security@...ts.openwall.com Subject: Sudo: CVE-2019-14287 Sudo 1.8.28...


    Read More

  • cve-details

    Skip to navigation Skip to main content Utilities Subscriptions Downloads Red Hat Console Get Support Subscriptions Downloads Red Hat Console Get Support Products Top Products Red Hat Enterprise Li...


    Read More

  • Something went wrong, but don’t fret — let’s give it another shot. Some privacy related extensions may cause issues on x.com. Please disable them and try again.


    Read More

Related rules

to-top