CVE-2019-14287

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

63.76% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 99.1% of scored records. A rank, not a probability.

NVD base score

8.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2019-10-17 17:03Z7 YR AGO

Last updated

2024-08-05 00:12Z2 YR AGO

Reserved

2019-07-27

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-755Improper Handling of Exceptional ConditionsClass
• CWE-267Privilege Defined With Unsafe ActionsBase

Data version

5.1

Document digest

e133d73912a1f03a472bcffe92466982f1825467950f68a338d0bd61d4a33899

• www.openwall.com[oss-security] 20191014 Sudo: CVE-2019-14287http://www.openwall.com/lists/oss-security/2019/10/14/1mailing-listx_refsource_MLIST
• usn.ubuntu.comUSN-4154-1https://usn.ubuntu.com/4154-1/vendor-advisoryx_refsource_UBUNTU
• www.debian.orgDSA-4543https://www.debian.org/security/2019/dsa-4543vendor-advisoryx_refsource_DEBIAN
• seclists.org20191015 [SECURITY] [DSA 4543-1] sudo security updatehttps://seclists.org/bugtraq/2019/Oct/21mailing-listx_refsource_BUGTRAQ
• seclists.org20191015 [slackware-security] sudo (SSA:2019-287-01)https://seclists.org/bugtraq/2019/Oct/20mailing-listx_refsource_BUGTRAQ
• lists.opensuse.orgopenSUSE-SU-2019:2316http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00042.htmlvendor-advisoryx_refsource_SUSE
• packetstormsecurity.comhttp://packetstormsecurity.com/files/154853/Slackware-Security-Advisory-sudo-Updates.htmlx_refsource_MISC
• lists.fedoraproject.orgFEDORA-2019-9cb221f2behttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IP7SIOAVLSKJGMTIULX52VQUPTVSC43U/vendor-advisoryx_refsource_FEDORA
• www.sudo.wshttps://www.sudo.ws/alerts/minus_1_uid.htmlx_refsource_CONFIRM
• lists.opensuse.orgopenSUSE-SU-2019:2333http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00047.htmlvendor-advisoryx_refsource_SUSE
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20191017-0003/x_refsource_CONFIRM
• www.openwall.com[oss-security] 20191015 Re: Sudo: CVE-2019-14287https://www.openwall.com/lists/oss-security/2019/10/15/2mailing-listx_refsource_MLIST
• lists.debian.org[debian-lts-announce] 20191017 [SECURITY] [DLA 1964-1] sudo security updatehttps://lists.debian.org/debian-lts-announce/2019/10/msg00022.htmlmailing-listx_refsource_MLIST
• lists.fedoraproject.orgFEDORA-2019-67998e9f7ehttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUVAOZBYUHZS56A5FQSCDVGXT7PW7FL2/vendor-advisoryx_refsource_FEDORA
• support.f5.comhttps://support.f5.com/csp/article/K53746212?utm_source=f5support&amp%3Butm_medium=RSSx_refsource_CONFIRM
• www.openwall.com[oss-security] 20191023 Membership application for linux-distros - VMwarehttp://www.openwall.com/lists/oss-security/2019/10/24/1mailing-listx_refsource_MLIST
• access.redhat.comRHSA-2019:3197https://access.redhat.com/errata/RHSA-2019:3197vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3205https://access.redhat.com/errata/RHSA-2019:3205vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3204https://access.redhat.com/errata/RHSA-2019:3204vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3209https://access.redhat.com/errata/RHSA-2019:3209vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3219https://access.redhat.com/errata/RHSA-2019:3219vendor-advisoryx_refsource_REDHAT
• www.openwall.com[oss-security] 20191029 Re: Membership application for linux-distros - VMwarehttp://www.openwall.com/lists/oss-security/2019/10/29/3mailing-listx_refsource_MLIST
• lists.fedoraproject.orgFEDORA-2019-72755db9c7https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPLAM57TPJQGKQMNG6RHFBLACD6K356N/vendor-advisoryx_refsource_FEDORA
• access.redhat.comRHSA-2019:3278https://access.redhat.com/errata/RHSA-2019:3278vendor-advisoryx_refsource_REDHAT
• resources.whitesourcesoftware.comhttps://resources.whitesourcesoftware.com/blog-whitesource/new-vulnerability-in-sudo-cve-2019-14287x_refsource_MISC
• access.redhat.comRHSA-2019:3694https://access.redhat.com/errata/RHSA-2019:3694vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3755https://access.redhat.com/errata/RHSA-2019:3755vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3754https://access.redhat.com/errata/RHSA-2019:3754vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3895https://access.redhat.com/errata/RHSA-2019:3895vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3916https://access.redhat.com/errata/RHSA-2019:3916vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHBA-2019:3248https://access.redhat.com/errata/RHBA-2019:3248vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:3941https://access.redhat.com/errata/RHSA-2019:3941vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2019:4191https://access.redhat.com/errata/RHSA-2019:4191vendor-advisoryx_refsource_REDHAT
• support.hpe.comhttps://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbns03976en_usx_refsource_CONFIRM
• access.redhat.comRHSA-2020:0388https://access.redhat.com/errata/RHSA-2020:0388vendor-advisoryx_refsource_REDHAT
• security.gentoo.orgGLSA-202003-12https://security.gentoo.org/glsa/202003-12vendor-advisoryx_refsource_GENTOO
• www.openwall.com[oss-security] 20210914 Re: Oracle Solaris membership in the distros listhttp://www.openwall.com/lists/oss-security/2021/09/14/2mailing-listx_refsource_MLIST