[Git][security-tracker-team/security-tracker][master] Add CVE-2019-14287/sudo

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
97e368d4 by Salvatore Bonaccorso at 2019-10-14T14:50:36Z
Add CVE-2019-14287/sudo

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9646,8 +9646,10 @@ CVE-2019-14288 (An issue was discovered in Xpdf 4.01.01. There is an Integer ove
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/commit/55db66c69fd56826b8523710046deab1a8d14ba2
 	NOTE: https://gitlab.freedesktop.org/poppler/poppler/commit/22c4701d5f7be0010ee4519daa546fba5ab7ac13
 	NOTE: Issue correspond to CVE-2017-9776 for src:poppler
-CVE-2019-14287
+CVE-2019-14287 [Potential bypass of Runas user restrictions]
 	RESERVED
+	- sudo <unfixed>
+	NOTE: https://www.sudo.ws/alerts/minus_1_uid.html
 CVE-2019-14286 (In app/webroot/js/event-graph.js in MISP 2.4.111, a stored XSS vulnera ...)
 	NOT-FOR-US: MISP
 CVE-2019-14285



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/97e368d4531d3ad3df317998f733e2a1d94bf8cb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/97e368d4531d3ad3df317998f733e2a1d94bf8cb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191014/acc45524/attachment-0001.html>