Every CVE Search/ Get API key

CVE-2025-32462

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the...

2.8 LowPublic exploitFix available

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
None

Exploit likelihood

4.48%Up 4.5 points since Jul 1, 2025
90%50%10%1%

What each source reports

CVE List Score used 2.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
CVE-2025-32462
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Weakness
CWE-863
Updated
2026-11-02
EUVDEUVD-2025-20867 2.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
EUVD-2025-20867
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-c5x2-97hm-x895 2.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the...

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
GHSA-c5x2-97hm-x895
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Weakness
CWE-863
Updated
2026-11-02
NVD 2.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
CVE-2025-32462
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-863
Updated
2026-11-02
OSVALPINE-CVE-2025-32462 8.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
ALPINE-CVE-2025-32462
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-03
OSVBELL-CVE-2025-32462 8.8
Record
BELL-CVE-2025-32462
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 46 moreShow less
OSV 2.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
CVE-2025-32462
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Weakness
CWE-863
Updated
2026-11-02
OSVDEBIAN-CVE-2025-32462 8.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
DEBIAN-CVE-2025-32462
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1733 2.8

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

Record
OESA-2025-1733
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1734 2.8

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

Record
OESA-2025-1734
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1735 9.3

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

A vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)

Record
OESA-2025-1735
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1736 9.3

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

A vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)

Record
OESA-2025-1736
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-1737 2.8

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

Record
OESA-2025-1737
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-1759 9.3

sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.

Security Fix(es):

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

A vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)

Record
OESA-2025-1759
CVSS 3.1
9.3 CriticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10110 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10110
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10383 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10383
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10518 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10518
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10520 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10520
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10707 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10707
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10779 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10779
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10835 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10835
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10836 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10836
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:10871 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:10871
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:11537 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:11537
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:9978 7.0

Red Hat Security Advisory: sudo security update

Record
RHSA-2025:9978
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:10110 7.0

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: LPE via host option (CVE-2025-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:10110
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:11537 7.8

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: LPE via host option (CVE-2025-32462)

  • sudo: LPE via chroot option (CVE-2025-32463)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:11537
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:9978 7.0

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: LPE via host option (CVE-2025-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:9978
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2004-CVE-2025-32462 8.8

CVE-2025-32462 in sudo - Patched by Root

Root has patched CVE-2025-32462 in the sudo package for Root:Ubuntu:20.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2004-CVE-2025-32462
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2025-32462 2.8

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
UBUNTU-CVE-2025-32462
CVSS 3.1
2.8 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2025:10110 No score

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: LPE via host option (CVE-2025-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:10110
Updated
2026-11-02
OSVALSA-2025:11537 No score

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: LPE via host option (CVE-2025-32462)
  • sudo: LPE via chroot option (CVE-2025-32463)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:11537
Updated
2026-11-02
OSVALSA-2025:9978 No score

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: LPE via host option (CVE-2025-32462)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:9978
Updated
2026-11-02
OSVAZL-64449 No score

CVE-2025-32462 affecting package sudo for versions less than 1.9.17-1

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
AZL-64449
Updated
2026-11-05
OSVAZL-64461 No score

CVE-2025-32462 affecting package sudo for versions less than 1.9.17-1

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Record
AZL-64461
Updated
2026-11-02
OSVCLSA-2025-1751893905 No score

sudo: Fix of CVE-2025-32462

  • CVE-2025-32462: fix privilege escalation vulnerability by restricting unauthorized users from gaining elevated system privileges via the Sudo host option
Record
CLSA-2025-1751893905
Updated
2026-11-02
OSVCLSA-2025-1751895848 No score

sudo: Fix of CVE-2025-32462

  • CVE-2025-32462: fix privilege escalation vulnerability by restricting unauthorized users from gaining elevated system privileges via the Sudo host option
Record
CLSA-2025-1751895848
Updated
2026-11-02
OSVCLSA-2025-1751900234 No score

sudo: Fix of CVE-2025-32462

  • CVE-2025-32462: fix privilege escalation vulnerability by restricting unauthorized users from gaining elevated system privileges via the Sudo host option
Record
CLSA-2025-1751900234
Updated
2026-11-02
OSVCLSA-2025-1751913242 No score

sudo: Fix of CVE-2025-32462

  • CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option
Record
CLSA-2025-1751913242
Updated
2026-11-02
OSVCLSA-2025-1751913478 No score

sudo: Fix of CVE-2025-32462

  • CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option
Record
CLSA-2025-1751913478
Updated
2026-11-02
OSVCLSA-2025-1751913630 No score

sudo: Fix of CVE-2025-32462

  • CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option
Record
CLSA-2025-1751913630
Updated
2026-11-02
OSVCLSA-2025-1752746954 No score

sudo: Fix of CVE-2025-32462

  • CVE-2025-32462: prevent listed users from executing commands on unintended machines by updating sudoers file validation
Record
CLSA-2025-1752746954
Updated
2026-11-02
OSVCLSA-2025-1753799090 No score

Fix CVE(s): CVE-2025-32462

  • SECURITY UPDATE: restrict users from executing commands on unintended machines
    • debian/patches/CVE-2025-32462.patch: restricts --host usage to sudo -l only, preventing bypass of host-based sudoers rules and avoiding unintended local privilege escalation
    • CVE-2025-32462
Record
CLSA-2025-1753799090
Updated
2026-11-02
OSVCLSA-2025-1753799668 No score

Fix CVE(s): CVE-2025-32462

  • SECURITY UPDATE: unauthorized commands execution on unintended hosts
    • debian/patches/CVE-2025-32462.patch: restrict user from setting remote host for command unless listing privileges
    • CVE-2025-32462
Record
CLSA-2025-1753799668
Updated
2026-11-02
OSVCLSA-2025-1753799801 No score

Fix CVE(s): CVE-2025-32462

  • SECURITY UPDATE: unauthorized command execution on remote hosts
    • debian/patches/CVE-2025-32462.patch: restrict user from setting remote host for command unless listing privileges
    • CVE-2025-32462
Record
CLSA-2025-1753799801
Updated
2026-11-02
OSVCLSA-2025-1761325294 No score

Fix CVE(s): CVE-2021-23240, CVE-2023-42465, CVE-2025-32462

  • SECURITY UPDATE: privilege escalation via symlinks
  • debian/patches/CVE-2021-23240.patch: fix opportunity for local unprivileged user to gain file ownership via symlinks.
  • SECURITY UPDATE: unauthorized commands execution on unintended hosts
  • debian/patches/CVE-2025-32462.patch: restrict user from setting remote host for command unless listing privileges
  • CVE-2025-32462
  • SECURITY UPDATE: row hammer attack
  • debian/patches/CVE-2023-42465.patch: make return values resist to single bit flips
  • CVE-2023-42465
Record
CLSA-2025-1761325294
Updated
2026-11-02
OSVCLSA-2026-1790600964 No score

sudo: Fix of 7 CVEs

  • Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
  • CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
  • CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
  • Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
Record
CLSA-2026-1790600964
Updated
2026-11-02
OSVCLSA-2026-1790601456 No score

sudo: Fix of 7 CVEs

  • Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
  • CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
  • CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
  • Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
Record
CLSA-2026-1790601456
Updated
2026-11-02
OSVCLSA-2026-1790606589 No score

sudo: Fix of 7 CVEs

  • Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
  • CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
  • CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
  • Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
Record
CLSA-2026-1790606589
Updated
2026-11-02
OSVMGASA-2025-0213 No score

Updated sudo packages fix security vulnerabilities

CVE-2025-32462 - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines CVE-2025-32463 - Sudo before 1.9.17p1 allows local users to obtain root access because "/etc/nsswitch.conf" from a user-controlled directory is used with the --chroot option.

Record
MGASA-2025-0213
Updated
2026-11-02
OSVopenSUSE-SU-2025:15298-1 No score

sudo-1.9.17p1-1.1 on GA media

These are all security issues fixed in the sudo-1.9.17p1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15298-1
Updated
2026-11-02
OSVSUSE-SU-2025:02174-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).
Record
SUSE-SU-2025:02174-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
sudo
Alpine:v3.21
 before 1.9.17_p1-r0
1.9.17_p1-r0
sudo
Alpine:v3.22
 before 1.9.17_p1-r0
1.9.17_p1-r0
sudo
Alpine:v3.23
 before 1.9.17_p1-r0
1.9.17_p1-r0
sudo
Alpine:v3.24
 before 1.9.17_p1-r0
1.9.17_p1-r0
sudo
AlmaLinux:8
 before 1.9.5p2-1.el8_10.1
1.9.5p2-1.el8_10.1
sudo
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.9.15-8.p5.el10_0.2
1.9.15-8.p5.el10_0.2
sudo-python-plugin
AlmaLinux:10
From an advisory covering 2 CVEs
 before 1.9.15-8.p5.el10_0.2
1.9.15-8.p5.el10_0.2
sudo
AlmaLinux:9
 before 1.9.5p2-10.el9_6.1
1.9.5p2-10.el9_6.1
sudo-python-plugin
AlmaLinux:9
 before 1.9.5p2-10.el9_6.1
1.9.5p2-10.el9_6.1
sudo
Azure Linux:3
 before 1.9.17-1
1.9.17-1
Show 151 moreShow less
Affected packages
PackageAffectedFixed
sudo
Azure Linux:2
 before 1.9.17-1
1.9.17-1
sudo
Alpaquita:23
 1.9.12_p1-r1 up to 1.9.15_p5-r1
1.9.15_p5-r1
sudo
Alpaquita:25
 1.9.16_p2-r1 up to 1.9.17_p2-r0
1.9.17_p2-r0
sudo
Alpaquita:stream
 1.9.13_p3-r0 up to 1.9.17_p1-r0
1.9.17_p1-r0
sudo
TuxCare:OracleLinux:7
 before 1.8.23-10.el7_9.3.tuxcare.els3
1.8.23-10.el7_9.3.tuxcare.els3
sudo-devel
TuxCare:OracleLinux:7
 before 1.8.23-10.el7_9.3.tuxcare.els3
1.8.23-10.el7_9.3.tuxcare.els3
sudo
TuxCare:RHEL:7
 before 1.8.23-10.el7_9.3.tuxcare.els3
1.8.23-10.el7_9.3.tuxcare.els3
sudo-devel
TuxCare:RHEL:7
 before 1.8.23-10.el7_9.3.tuxcare.els3
1.8.23-10.el7_9.3.tuxcare.els3
sudo
TuxCare:CentOS:7
 before 1.8.23-10.el7_9.3.tuxcare.els3
1.8.23-10.el7_9.3.tuxcare.els3
sudo-devel
TuxCare:CentOS:7
 before 1.8.23-10.el7_9.3.tuxcare.els3
1.8.23-10.el7_9.3.tuxcare.els3
sudo
TuxCare:CentOS-Stream:8
 before 1.9.5p2-1.el8.tuxcare.els1
1.9.5p2-1.el8.tuxcare.els1
sudo-devel
TuxCare:CentOS-Stream:8
 before 1.9.5p2-1.el8.tuxcare.els1
1.9.5p2-1.el8.tuxcare.els1
sudo
TuxCare:CentOS:8.4
 before 1.8.29-7.el8_4.1.tuxcare.els4
1.8.29-7.el8_4.1.tuxcare.els4
sudo-devel
TuxCare:CentOS:8.4
 before 1.8.29-7.el8_4.1.tuxcare.els4
1.8.29-7.el8_4.1.tuxcare.els4
sudo
TuxCare:CentOS:8.5
 before 1.8.29-7.el8_4.1.tuxcare.els4
1.8.29-7.el8_4.1.tuxcare.els4
sudo-devel
TuxCare:CentOS:8.5
 before 1.8.29-7.el8_4.1.tuxcare.els4
1.8.29-7.el8_4.1.tuxcare.els4
sudo
TuxCare:AlmaLinux:9.2
 before 1.9.5p2-9.el9.tuxcare.els3
1.9.5p2-9.el9.tuxcare.els3
sudo-devel
TuxCare:AlmaLinux:9.2
 before 1.9.5p2-9.el9.tuxcare.els3
1.9.5p2-9.el9.tuxcare.els3
sudo-python-plugin
TuxCare:AlmaLinux:9.2
 before 1.9.5p2-9.el9.tuxcare.els3
1.9.5p2-9.el9.tuxcare.els3
sudo
TuxCare:Ubuntu:20.04
 before 1.8.31-1ubuntu1.5+tuxcare.els1
1.8.31-1ubuntu1.5+tuxcare.els1
sudo-ldap
TuxCare:Ubuntu:20.04
 before 1.8.31-1ubuntu1.5+tuxcare.els1
1.8.31-1ubuntu1.5+tuxcare.els1
sudo
TuxCare:Ubuntu:18.04
 before 1.8.21p2-3ubuntu1.6+tuxcare.els2
1.8.21p2-3ubuntu1.6+tuxcare.els2
sudo-ldap
TuxCare:Ubuntu:18.04
 before 1.8.21p2-3ubuntu1.6+tuxcare.els2
1.8.21p2-3ubuntu1.6+tuxcare.els2
sudo
TuxCare:Ubuntu:16.04
 before 1.8.16-0ubuntu1.11+tuxcare.els3
1.8.16-0ubuntu1.11+tuxcare.els3
sudo-ldap
TuxCare:Ubuntu:16.04
 before 1.8.16-0ubuntu1.11+tuxcare.els3
1.8.16-0ubuntu1.11+tuxcare.els3
sudo
TuxCare:Debian:10
From an advisory covering 3 CVEs
 before 1.8.27-1+deb10u6+tuxcare.els1
1.8.27-1+deb10u6+tuxcare.els1
sudo-ldap
TuxCare:Debian:10
From an advisory covering 3 CVEs
 before 1.8.27-1+deb10u6+tuxcare.els1
1.8.27-1+deb10u6+tuxcare.els1
sudo
TuxCare:RHEL:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo-devel
TuxCare:RHEL:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo
TuxCare:OracleLinux:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo-devel
TuxCare:OracleLinux:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo
TuxCare:CentOS:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo-devel
TuxCare:CentOS:7
From an advisory covering 7 CVEs
 before 1.8.23-10.0.3.el7_9.3.tuxcare.els1
1.8.23-10.0.3.el7_9.3.tuxcare.els1
sudo
Debian:12
 before 1.9.13p3-1+deb12u2, plus listed versions
1.9.13p3-11.9.13p3-1+deb12u1
1.9.13p3-1+deb12u2
sudo
Debian:13
 before 1.9.16p2-3
1.9.16p2-3
sudo
Debian:14
 before 1.9.16p2-3
1.9.16p2-3
sudo
Debian:11
 before 1.9.5p2-3+deb11u2, plus listed versions
1.9.5p2-31.9.5p2-3+deb11u1
1.9.5p2-3+deb11u2
sudo
Mageia:9
From an advisory covering 2 CVEs
 before 1.9.15p5-1.1.mga9
1.9.15p5-1.1.mga9
sudo
openEuler:22.03-LTS-SP3
 before 1.9.8p2-19.oe2203sp3
1.9.8p2-19.oe2203sp3
sudo
openEuler:22.03-LTS-SP4
 before 1.9.8p2-19.oe2203sp4
1.9.8p2-19.oe2203sp4
sudo
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 1.9.15p5-4.oe2403
1.9.15p5-4.oe2403
sudo
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 1.9.15p5-4.oe2403sp1
1.9.15p5-4.oe2403sp1
sudo
openEuler:20.03-LTS-SP4
 before 1.9.2-18.oe2003sp4
1.9.2-18.oe2003sp4
sudo
openEuler:24.03-LTS-SP2
From an advisory covering 2 CVEs
 before 1.9.15p5-4.oe2403sp2
1.9.15p5-4.oe2403sp2
sudo
Red Hat:enterprise_linux:8::baseos
 before 0:1.9.5p2-1.el8_10.1
0:1.9.5p2-1.el8_10.1
sudo-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.9.5p2-1.el8_10.1
0:1.9.5p2-1.el8_10.1
sudo-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.9.5p2-1.el8_10.1
0:1.9.5p2-1.el8_10.1
sudo
Red Hat:rhel_aus:8.4::baseos
 before 0:1.8.29-7.el8_4.3
0:1.8.29-7.el8_4.3
sudo-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:1.8.29-7.el8_4.3
0:1.8.29-7.el8_4.3
sudo-debugsource
Red Hat:rhel_aus:8.4::baseos
 before 0:1.8.29-7.el8_4.3
0:1.8.29-7.el8_4.3
sudo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.8.29-7.el8_4.3
0:1.8.29-7.el8_4.3
sudo-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.8.29-7.el8_4.3
0:1.8.29-7.el8_4.3
sudo-debugsource
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:1.8.29-7.el8_4.3
0:1.8.29-7.el8_4.3
sudo
Red Hat:rhel_aus:8.2::baseos
 before 0:1.8.29-5.el8_2.3
0:1.8.29-5.el8_2.3
sudo-debuginfo
Red Hat:rhel_aus:8.2::baseos
 before 0:1.8.29-5.el8_2.3
0:1.8.29-5.el8_2.3
sudo-debugsource
Red Hat:rhel_aus:8.2::baseos
 before 0:1.8.29-5.el8_2.3
0:1.8.29-5.el8_2.3
sudo
Red Hat:rhel_aus:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo-debugsource
Red Hat:rhel_aus:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo
Red Hat:rhel_e4s:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo-debuginfo
Red Hat:rhel_e4s:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo-debugsource
Red Hat:rhel_e4s:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo
Red Hat:rhel_tus:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo-debuginfo
Red Hat:rhel_tus:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo-debugsource
Red Hat:rhel_tus:8.6::baseos
 before 0:1.9.5p2-1.el8_6.1
0:1.9.5p2-1.el8_6.1
sudo-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:1.9.5p2-10.el9_4.1
0:1.9.5p2-10.el9_4.1
sudo-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 0:1.9.5p2-10.el9_4.1
0:1.9.5p2-10.el9_4.1
sudo-python-plugin
Red Hat:rhel_eus:9.4::appstream
 before 0:1.9.5p2-10.el9_4.1
0:1.9.5p2-10.el9_4.1
sudo-python-plugin-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 0:1.9.5p2-10.el9_4.1
0:1.9.5p2-10.el9_4.1
sudo
Red Hat:rhel_eus:9.4::baseos
 before 0:1.9.5p2-10.el9_4.1
0:1.9.5p2-10.el9_4.1
sudo-debuginfo
Red Hat:rhel_eus:9.4::baseos
 before 0:1.9.5p2-10.el9_4.1
0:1.9.5p2-10.el9_4.1
sudo-debugsource
Red Hat:rhel_eus:9.4::baseos
 before 0:1.9.5p2-10.el9_4.1
0:1.9.5p2-10.el9_4.1
sudo-python-plugin-debuginfo
Red Hat:rhel_eus:9.4::baseos
 before 0:1.9.5p2-10.el9_4.1
0:1.9.5p2-10.el9_4.1
sudo-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.9.5p2-9.el9_2.3
0:1.9.5p2-9.el9_2.3
sudo-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.9.5p2-9.el9_2.3
0:1.9.5p2-9.el9_2.3
sudo-python-plugin
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.9.5p2-9.el9_2.3
0:1.9.5p2-9.el9_2.3
sudo-python-plugin-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.9.5p2-9.el9_2.3
0:1.9.5p2-9.el9_2.3
sudo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.9.5p2-9.el9_2.3
0:1.9.5p2-9.el9_2.3
sudo-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.9.5p2-9.el9_2.3
0:1.9.5p2-9.el9_2.3
sudo-debugsource
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.9.5p2-9.el9_2.3
0:1.9.5p2-9.el9_2.3
sudo-python-plugin-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:1.9.5p2-9.el9_2.3
0:1.9.5p2-9.el9_2.3
sudo-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:1.9.5p2-7.el9_0.5
0:1.9.5p2-7.el9_0.5
sudo-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 0:1.9.5p2-7.el9_0.5
0:1.9.5p2-7.el9_0.5
sudo-python-plugin
Red Hat:rhel_e4s:9.0::appstream
 before 0:1.9.5p2-7.el9_0.5
0:1.9.5p2-7.el9_0.5
sudo-python-plugin-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 0:1.9.5p2-7.el9_0.5
0:1.9.5p2-7.el9_0.5
sudo
Red Hat:rhel_e4s:9.0::baseos
 before 0:1.9.5p2-7.el9_0.5
0:1.9.5p2-7.el9_0.5
sudo-debuginfo
Red Hat:rhel_e4s:9.0::baseos
 before 0:1.9.5p2-7.el9_0.5
0:1.9.5p2-7.el9_0.5
sudo-debugsource
Red Hat:rhel_e4s:9.0::baseos
 before 0:1.9.5p2-7.el9_0.5
0:1.9.5p2-7.el9_0.5
sudo-python-plugin-debuginfo
Red Hat:rhel_e4s:9.0::baseos
 before 0:1.9.5p2-7.el9_0.5
0:1.9.5p2-7.el9_0.5
sudo
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.9.5p2-1.el8_8.1
0:1.9.5p2-1.el8_8.1
sudo-debuginfo
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.9.5p2-1.el8_8.1
0:1.9.5p2-1.el8_8.1
sudo-debugsource
Red Hat:rhel_e4s:8.8::baseos
 before 0:1.9.5p2-1.el8_8.1
0:1.9.5p2-1.el8_8.1
sudo
Red Hat:rhel_tus:8.8::baseos
 before 0:1.9.5p2-1.el8_8.1
0:1.9.5p2-1.el8_8.1
sudo-debuginfo
Red Hat:rhel_tus:8.8::baseos
 before 0:1.9.5p2-1.el8_8.1
0:1.9.5p2-1.el8_8.1
sudo-debugsource
Red Hat:rhel_tus:8.8::baseos
 before 0:1.9.5p2-1.el8_8.1
0:1.9.5p2-1.el8_8.1
sudo
Red Hat:rhel_els:7
 before 0:1.8.23-10.el7_9.4
0:1.8.23-10.el7_9.4
sudo-debuginfo
Red Hat:rhel_els:7
 before 0:1.8.23-10.el7_9.4
0:1.8.23-10.el7_9.4
sudo-devel
Red Hat:rhel_els:7
 before 0:1.8.23-10.el7_9.4
0:1.8.23-10.el7_9.4
sudo-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.9.15-8.p5.el10_0.2
0:1.9.15-8.p5.el10_0.2
sudo-debugsource
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.9.15-8.p5.el10_0.2
0:1.9.15-8.p5.el10_0.2
sudo-python-plugin
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.9.15-8.p5.el10_0.2
0:1.9.15-8.p5.el10_0.2
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.9.15-8.p5.el10_0.2
0:1.9.15-8.p5.el10_0.2
sudo
Red Hat:enterprise_linux:10.0
From an advisory covering 2 CVEs
 before 0:1.9.15-8.p5.el10_0.2
0:1.9.15-8.p5.el10_0.2
sudo-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo-python-plugin
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo-python-plugin-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo
Rocky Linux:8
 before 0:1.9.5p2-1.el8_10.1
0:1.9.5p2-1.el8_10.1
sudo
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:1.9.15-8.p5.el10_0.2
0:1.9.15-8.p5.el10_0.2
sudo
Rocky Linux:9
 before 0:1.9.5p2-10.el9_6.1
0:1.9.5p2-10.el9_6.1
sudo
Root:Ubuntu:20.04
 before 1.8.31-1ubuntu1.5.aikido.1
1.8.31-1ubuntu1.5.aikido.11.8.31-1ubuntu1.5.aikido.2
rootio-sudo
Root:Ubuntu:20.04
 before 1.8.31-1ubuntu1.5.aikido.1
1.8.31-1ubuntu1.5.aikido.11.8.31-1ubuntu1.5.aikido.2
sudo
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 1.8.27-4.54.1
1.8.27-4.54.1
sudo
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 1.8.27-4.54.1
1.8.27-4.54.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.9.5p2-150300.3.36.1
1.9.5p2-150300.3.36.1
sudo
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.9.5p2-150300.3.36.1
1.9.5p2-150300.3.36.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.9.5p2-150300.3.36.1
1.9.5p2-150300.3.36.1
sudo
SUSE:Linux Enterprise Micro 5.1
 before 1.9.5p2-150300.3.36.1
1.9.5p2-150300.3.36.1
sudo
SUSE:Linux Enterprise Micro 5.2
 before 1.9.5p2-150300.3.36.1
1.9.5p2-150300.3.36.1
sudo
SUSE:Enterprise Storage 7.1
 before 1.9.5p2-150300.3.36.1
1.9.5p2-150300.3.36.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 1.9.15p5-150600.3.9.1
1.9.15p5-150600.3.9.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 1.9.15p5-150600.3.9.1
1.9.15p5-150600.3.9.1
sudo
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 1.9.15p5-150600.3.9.1
1.9.15p5-150600.3.9.1
sudo
SUSE:Linux Enterprise Micro 5.3
 before 1.9.9-150400.4.39.1
1.9.9-150400.4.39.1
sudo
SUSE:Linux Enterprise Micro 5.4
 before 1.9.9-150400.4.39.1
1.9.9-150400.4.39.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 1.9.9-150400.4.39.1
1.9.9-150400.4.39.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 1.9.9-150400.4.39.1
1.9.9-150400.4.39.1
sudo
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 1.9.9-150400.4.39.1
1.9.9-150400.4.39.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 1.9.9-150400.4.39.1
1.9.9-150400.4.39.1
sudo
SUSE:Manager Proxy 4.3
 before 1.9.9-150400.4.39.1
1.9.9-150400.4.39.1
sudo
SUSE:Manager Server 4.3
 before 1.9.9-150400.4.39.1
1.9.9-150400.4.39.1
sudo
SUSE:Linux Enterprise Micro 5.5
 before 1.9.12p1-150500.7.13.1
1.9.12p1-150500.7.13.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 1.9.12p1-150500.7.13.1
1.9.12p1-150500.7.13.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 1.9.12p1-150500.7.13.1
1.9.12p1-150500.7.13.1
sudo
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 1.9.12p1-150500.7.13.1
1.9.12p1-150500.7.13.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 1.9.12p1-150500.7.13.1
1.9.12p1-150500.7.13.1
sudo
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 1.9.15p5-slfo.1.1_2.1
1.9.15p5-slfo.1.1_2.1
sudo
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 1.9.15p5-2.1
1.9.15p5-2.1
sudo
Ubuntu:Pro:14.04:LTS
 before 1.8.9p5-1ubuntu1.5+esm8, plus listed versions
1.8.6p3-0ubuntu31.8.8-2ubuntu11.8.8-2ubuntu21.8.9p4-1ubuntu11.8.9p4-1ubuntu2
Show 11 moreShow less
1.8.9p5-1ubuntu11.8.9p5-1ubuntu1.11.8.9p5-1ubuntu1.21.8.9p5-1ubuntu1.31.8.9p5-1ubuntu1.41.8.9p5-1ubuntu1.5+esm11.8.9p5-1ubuntu1.5+esm21.8.9p5-1ubuntu1.5+esm31.8.9p5-1ubuntu1.5+esm51.8.9p5-1ubuntu1.5+esm61.8.9p5-1ubuntu1.5+esm7
1.8.9p5-1ubuntu1.5+esm8
sudo
Ubuntu:Pro:16.04:LTS
 before 1.8.16-0ubuntu1.10+esm3, plus listed versions
1.8.12-1ubuntu31.8.16-0ubuntu11.8.16-0ubuntu1.11.8.16-0ubuntu1.21.8.16-0ubuntu1.3
Show 9 moreShow less
1.8.16-0ubuntu1.41.8.16-0ubuntu1.51.8.16-0ubuntu1.61.8.16-0ubuntu1.71.8.16-0ubuntu1.81.8.16-0ubuntu1.91.8.16-0ubuntu1.101.8.16-0ubuntu1.10+esm11.8.16-0ubuntu1.10+esm2
1.8.16-0ubuntu1.10+esm3
sudo
Ubuntu:Pro:18.04:LTS
 before 1.8.21p2-3ubuntu1.6+esm1, plus listed versions
1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.11.8.21p2-3ubuntu1.2
Show 4 moreShow less
1.8.21p2-3ubuntu1.31.8.21p2-3ubuntu1.41.8.21p2-3ubuntu1.51.8.21p2-3ubuntu1.6
1.8.21p2-3ubuntu1.6+esm1
sudo
Ubuntu:Pro:20.04:LTS
 before 1.8.31-1ubuntu1.5+esm1, plus listed versions
1.8.27-1ubuntu41.8.29-1ubuntu11.8.31-1ubuntu11.8.31-1ubuntu1.11.8.31-1ubuntu1.21.8.31-1ubuntu1.41.8.31-1ubuntu1.5
1.8.31-1ubuntu1.5+esm1
sudo
Ubuntu:22.04:LTS
 before 1.9.9-1ubuntu2.5, plus listed versions
1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.11.9.9-1ubuntu2.21.9.9-1ubuntu2.31.9.9-1ubuntu2.4
1.9.9-1ubuntu2.5
sudo
Ubuntu:24.04:LTS
 before 1.9.15p5-3ubuntu5.24.04.1, plus listed versions
1.9.14p2-1ubuntu11.9.15p5-3ubuntu11.9.15p5-3ubuntu31.9.15p5-3ubuntu41.9.15p5-3ubuntu5
1.9.15p5-3ubuntu5.24.04.1
sudo
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 1.9.9-1ubuntu2.5, plus listed versions
1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.11.9.9-1ubuntu2.21.9.9-1ubuntu2.31.9.9-1ubuntu2.4
1.9.9-1ubuntu2.5
sudo
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 1.9.15p5-3ubuntu5.24.04.1, plus listed versions
1.9.14p2-1ubuntu11.9.15p5-3ubuntu11.9.15p5-3ubuntu31.9.15p5-3ubuntu41.9.15p5-3ubuntu5
1.9.15p5-3ubuntu5.24.04.1
sudo
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.9.17p1-1.1
1.9.17p1-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitSudo Chroot 1.9.17 Privilege Escalation2025-06-30
PoC in GitHubCryingN/CVE-2025-324622025-07-03
PoC in GitHubcybersentinelx1/CVE-2025-32462-Exploit2025-07-03
PoC in GitHubmylovem313/CVE-2025-324622025-07-03
PoC in GitHub0p5cur/CVE-2025-32462-POC2025-07-04
PoC in GitHubSpongeBob-369/cve-2025-324622025-07-05
PoC in GitHubMAAYTHM/CVE-2025-32462_32463-Lab2025-07-07
Exploit-DBSudo 1.9.17 Host Option - Elevation of Privilege2025-07-08
PoC in GitHubtoohau/CVE-2025-32462-32463-Detection-Script-2025-07-11
PoC in GitHubj3r1ch0123/CVE-2025-324622025-07-28
PoC in GitHubOffSecPlaybook/CVE-2025-32462-2025-12-25
PoC in GitHublakshan-sameera/CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities2026-01-13
PoC in GitHubyonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab2026-03-05

History

History
RecordedChangedSources
affected
factsOSV
affected, aliases, exploits, referencesOSV
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-32462 is a low vulnerability (CVSS 2.8) in Sudo Project Sudo, published June 30, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.48%, the 91st percentile. Fixed in sudo 1.9.17_p1-r0.

References

Show 95 moreShow less
This page doesn't list everything

Left out on purpose, here and in the API, to keep responses small: 8 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open