QID 671132

Sudo (superuser do) allows a system administrator to give certain users (or groups of users) the ability to run some (or all) commands as root while logging all commands and arguments.
Sudo operates on a per-command basis.
It is not a replacement for the shell.
Features include: the ability to restrict what commands a user may run on a per-host basis, copious logging of each command (providing a clear audit trail of who did what), a configurable timeout of the sudo command, and the ability to use the same configuration file (sudoers) on many different machines.
Security fix(es): in sudo before 1.8.28, an attacker with access to a runas all sudoer account can bypass certain policy blacklists and session pam modules, and can cause incorrect logging, by invoking sudo with a crafted user id.
For example, this allows bypass of !
Root configuration, and user= logging, for a "sudo -u \#$((0xffffffff))" command.(cve-2019-14287)

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

An arbitrary attacker may exploit this vulnerability to compromise the system.