Vulnerability Report

CVE-2019-19234

Title: Sudo

Other

Proof Of Concept

No public PoC currently indexed for CVE-2019-19234.

CWE Category NVD-CWE-noinfo
Published Date Dec 19, 2019
Modified Date Nov 21, 2024
Exploit Status Not Found
Score 7.5 CVSS v3.1
Exploit Probability (EPSS)
2.83%

Vulnerability Summary

CVE-2019-19234: In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instead of a password hash) is not considered, allowing an attacker (who has access to a Runas ALL sudoer account) to impersonate any blocked user. NOTE: The software maintainer believes that this CVE is not valid. Disabling local password authentication for a user is not the same as disabling all access to that user--the user may still be able to login via other means (ssh key, kerberos, etc). Both the Linux shadow(5) and passwd(1) manuals are clear on this. Indeed it is a valid use case to have local accounts that are _only_ accessible via sudo and that cannot be logged into with a password. Sudo 1.8.30 added an optional setting to check the _shell_ of the target user (not the encrypted password!) against the contents of /etc/shells but that is not the same thing as preventing access to users with an invalid password hash

Impacted Vendors

T
todd_miller 1
G
gratisoft 1
S
sudo 1

Reference Links

https://access.redhat.com/security/cve/cve-2019-19234 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/ https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58104 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58473 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58772 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58812 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58979 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs60748 https://security.netapp.com/advisory/ntap-20200103-0004/ https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-19234 https://support2.windriver.com/index.php?page=defects&on=view&id=LIN1018-5505 https://support2.windriver.com/index.php?page=defects&on=view&id=LIN1019-3816 https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2019/12/warnmeldung_cb-k20-0001.html https://www.oracle.com/security-alerts/bulletinapr2020.html https://www.sudo.ws/devel.html#1.8.30b2 https://www.sudo.ws/stable.html https://www.suse.com/security/cve/CVE-2019-19234/ https://www.tenable.com/plugins/nessus/132985 https://access.redhat.com/security/cve/cve-2019-19234 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I6TKF36KOQUVJNBHSVJFA7BU3CCEYD2F/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IY6DZ7WMDKU4ZDML6MJLDAPG42B5WVUC/ https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58104 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58473 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58772 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58812 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs58979 https://quickview.cloudapps.cisco.com/quickview/bug/CSCvs60748 https://security.netapp.com/advisory/ntap-20200103-0004/ https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-19234 https://support2.windriver.com/index.php?page=defects&on=view&id=LIN1018-5505 https://support2.windriver.com/index.php?page=defects&on=view&id=LIN1019-3816 https://www.bsi.bund.de/SharedDocs/Warnmeldungen/DE/CB/2019/12/warnmeldung_cb-k20-0001.html https://www.oracle.com/security-alerts/bulletinapr2020.html https://www.sudo.ws/devel.html#1.8.30b2 https://www.sudo.ws/stable.html https://www.suse.com/security/cve/CVE-2019-19234/ https://www.tenable.com/plugins/nessus/132985
CVSS v3.1
Source Entity [email protected]
Severity HIGH
7.5
Attack Vector
NETWORK
Complexity
LOW
Privileges
N/A
Interaction
NONE
Confidentiality
N/A
Integrity
N/A
Availability
N/A
Scope
UNCHANGED
RAW VECTOR CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
5.0
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:N/I:P/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2019-19234 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector NETWORK
Complexity LOW
Privileges N/A
Interaction NONE
CVSS Vector String CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Stack

No specific products linked.