Sudo Privilege Escalation CVE-2019-14287

calendar Oct 23, 2025 · attack.defense-evasion attack.privilege-escalation attack.t1068 attack.t1548.003 cve.2019-14287  ·
Share on: linkedin copy

Detects users trying to exploit sudo vulnerability reported in CVE-2019-14287

Sigma rule (View on GitHub)

 1title: Sudo Privilege Escalation CVE-2019-14287
 2id: f74107df-b6c6-4e80-bf00-4170b658162b
 3status: test
 4description: Detects users trying to exploit sudo vulnerability reported in CVE-2019-14287
 5references:
 6    - https://www.openwall.com/lists/oss-security/2019/10/14/1
 7    - https://access.redhat.com/security/cve/cve-2019-14287
 8    - https://twitter.com/matthieugarin/status/1183970598210412546
 9author: Florian Roth (Nextron Systems)
10date: 2019-10-15
11modified: 2022-10-05
12tags:
13    - attack.defense-evasion
14    - attack.privilege-escalation
15    - attack.t1068
16    - attack.t1548.003
17    - cve.2019-14287
18logsource:
19    product: linux
20    category: process_creation
21detection:
22    selection:
23        CommandLine|contains: ' -u#'
24    condition: selection
25falsepositives:
26    - Unlikely
27level: high

References

  • oss-security - Sudo: CVE-2019-14287

    [ ] [thread-next>] [day] [month] [year] [list] Message-ID: Date: Mon, 14 Oct 2019 09:00:31 -0600 From: "Todd C. Miller" To: oss-security@...ts.openwall.com Subject: Sudo: CVE-2019-14287 Sudo 1.8.28...


    Read More

  • cve-details

    Skip to navigation Skip to main content Utilities Subscriptions Downloads Red Hat Console Get Support Subscriptions Downloads Red Hat Console Get Support Products Top Products Red Hat Enterprise Li...


    Read More

  • Something went wrong, but don’t fret — let’s give it another shot. Some privacy related extensions may cause issues on x.com. Please disable them and try again.


    Read More

Related rules

to-top