A penetration tester discovers a Linux system running Sudo version 1.8.x and attempts 'sudo -u#-1 /bin/bash'. What vulnerability does this exploit?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because CVE-2019-14287 is a Sudo vulnerability where specifying user ID -1 (which wraps around to UID 0 / root in unsigned integer arithmetic) bypasses Sudo policies that explicitly exclude root execution, allowing privilege escalation. A is wrong because Dirty Cow (CVE-2016-5195) is a kernel race condition vulnerability in memory copy-on-write, not a Sudo bypass.
Full explanation below image
Full Explanation
B is correct because CVE-2019-14287 is a Sudo vulnerability where specifying user ID -1 (which wraps around to UID 0 / root in unsigned integer arithmetic) bypasses Sudo policies that explicitly exclude root execution, allowing privilege escalation. A is wrong because Dirty Cow (CVE-2016-5195) is a kernel race condition vulnerability in memory copy-on-write, not a Sudo bypass. C is wrong because this is not a PAM bypass; it exploits how Sudo handles UID conversion. D is wrong because the exploit targets Sudo's UID parsing, not a SUID bit on bash.