{"id":"CVE-2025-32462","aliases":["ALPINE-CVE-2025-32462","ALSA-2025:10110","ALSA-2025:11537","ALSA-2025:9978","AZL-64449","AZL-64461","BELL-CVE-2025-32462","CLSA-2025-1751893905","CLSA-2025-1751895848","CLSA-2025-1751900234","CLSA-2025-1751913242","CLSA-2025-1751913478","CLSA-2025-1751913630","CLSA-2025-1752746954","CLSA-2025-1753799090","CLSA-2025-1753799668","CLSA-2025-1753799801","CLSA-2025-1761325294","CLSA-2026-1790600964","CLSA-2026-1790601456","CLSA-2026-1790606589","DEBIAN-CVE-2025-32462","DLA-4235-1","DSA-5954-1","EUVD-2025-20867","GHSA-c5x2-97hm-x895","MGASA-2025-0213","OESA-2025-1733","OESA-2025-1734","OESA-2025-1735","OESA-2025-1736","OESA-2025-1737","OESA-2025-1759","RHSA-2025:10110","RHSA-2025:10383","RHSA-2025:10518","RHSA-2025:10520","RHSA-2025:10707","RHSA-2025:10779","RHSA-2025:10835","RHSA-2025:10836","RHSA-2025:10871","RHSA-2025:11537","RHSA-2025:9978","RLSA-2025:10110","RLSA-2025:11537","RLSA-2025:9978","ROOT-OS-UBUNTU-2004-CVE-2025-32462","SUSE-SU-2025:02174-1","SUSE-SU-2025:02175-1","SUSE-SU-2025:02177-1","SUSE-SU-2025:02178-1","SUSE-SU-2025:02179-1","SUSE-SU-2025:20478-1","SUSE-SU-2025:20489-1","UBUNTU-CVE-2025-32462","USN-7604-1","USN-7604-2","openSUSE-SU-2025:15298-1"],"status":"published","title":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the...","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","severity":{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.04477,"percentile":0.91579,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-863"],"published":"2025-06-30T00:00:00Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"metasploit","id":"exploit/linux/local/sudo_chroot_cve_2025_32463","title":"Sudo Chroot 1.9.17 Privilege Escalation","type":"exploit","platform":"Linux","date":"2025-06-30","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/sudo_chroot_cve_2025_32463"},{"source":"pocgithub","id":"CryingN/CVE-2025-32462","title":"CryingN/CVE-2025-32462","date":"2025-07-03","url":"https://github.com/CryingN/CVE-2025-32462"},{"source":"pocgithub","id":"cybersentinelx1/CVE-2025-32462-Exploit","title":"cybersentinelx1/CVE-2025-32462-Exploit","date":"2025-07-03","url":"https://github.com/cybersentinelx1/CVE-2025-32462-Exploit"},{"source":"pocgithub","id":"mylovem313/CVE-2025-32462","title":"mylovem313/CVE-2025-32462","date":"2025-07-03","url":"https://github.com/mylovem313/CVE-2025-32462"},{"source":"pocgithub","id":"0p5cur/CVE-2025-32462-POC","title":"0p5cur/CVE-2025-32462-POC","date":"2025-07-04","url":"https://github.com/0p5cur/CVE-2025-32462-POC"},{"source":"pocgithub","id":"SpongeBob-369/cve-2025-32462","title":"SpongeBob-369/cve-2025-32462","date":"2025-07-05","url":"https://github.com/SpongeBob-369/cve-2025-32462"},{"source":"pocgithub","id":"MAAYTHM/CVE-2025-32462_32463-Lab","title":"MAAYTHM/CVE-2025-32462_32463-Lab","date":"2025-07-07","url":"https://github.com/MAAYTHM/CVE-2025-32462_32463-Lab"},{"source":"exploitdb","id":"EDB-52354","title":"Sudo 1.9.17 Host Option - Elevation of Privilege","type":"local","platform":"linux","date":"2025-07-08","url":"https://www.exploit-db.com/exploits/52354"},{"source":"pocgithub","id":"toohau/CVE-2025-32462-32463-Detection-Script-","title":"toohau/CVE-2025-32462-32463-Detection-Script-","date":"2025-07-11","url":"https://github.com/toohau/CVE-2025-32462-32463-Detection-Script-"},{"source":"pocgithub","id":"j3r1ch0123/CVE-2025-32462","title":"j3r1ch0123/CVE-2025-32462","date":"2025-07-28","url":"https://github.com/j3r1ch0123/CVE-2025-32462"},{"source":"pocgithub","id":"OffSecPlaybook/CVE-2025-32462-","title":"OffSecPlaybook/CVE-2025-32462-","date":"2025-12-25","url":"https://github.com/OffSecPlaybook/CVE-2025-32462-"},{"source":"pocgithub","id":"lakshan-sameera/CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities","title":"lakshan-sameera/CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities","date":"2026-01-13","url":"https://github.com/lakshan-sameera/CVE-2025-32462-and-CVE-2025-32463---Critical-Sudo-Vulnerabilities"},{"source":"pocgithub","id":"yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab","title":"yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab","date":"2026-03-05","url":"https://github.com/yonathanpy/CVE-2025-32462-CVE-2025-32463-PoC-Lab"}],"fixes":[{"ecosystem":"Alpine:v3.21","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"sudo","fixed_in":["1.9.5p2-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"sudo","fixed_in":["1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"sudo-python-plugin","fixed_in":["1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"sudo","fixed_in":["1.9.17-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"sudo","fixed_in":["1.9.17-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"sudo","fixed_in":["1.9.15_p5-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"sudo","fixed_in":["1.9.17_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"sudo","fixed_in":["1.8.23-10.el7_9.3.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"sudo-devel","fixed_in":["1.8.23-10.el7_9.3.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"sudo","fixed_in":["1.8.23-10.el7_9.3.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"sudo-devel","fixed_in":["1.8.23-10.el7_9.3.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"sudo","fixed_in":["1.8.23-10.el7_9.3.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"sudo-devel","fixed_in":["1.8.23-10.el7_9.3.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"sudo","fixed_in":["1.9.5p2-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"sudo-devel","fixed_in":["1.9.5p2-1.el8.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"sudo","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"sudo-devel","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"sudo","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"sudo-devel","fixed_in":["1.8.29-7.el8_4.1.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo","fixed_in":["1.9.5p2-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo-devel","fixed_in":["1.9.5p2-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo-python-plugin","fixed_in":["1.9.5p2-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"sudo","fixed_in":["1.8.31-1ubuntu1.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:20.04","package":"sudo-ldap","fixed_in":["1.8.31-1ubuntu1.5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"sudo","fixed_in":["1.8.21p2-3ubuntu1.6+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"sudo-ldap","fixed_in":["1.8.21p2-3ubuntu1.6+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"sudo","fixed_in":["1.8.16-0ubuntu1.11+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"sudo-ldap","fixed_in":["1.8.16-0ubuntu1.11+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.9.13p3-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.9.16p2-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.9.16p2-3"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"sudo","fixed_in":["1.9.5p2-3+deb11u2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"sudo","fixed_in":["1.9.8p2-19.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"sudo","fixed_in":["1.9.8p2-19.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"sudo","fixed_in":["1.9.2-18.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","fixed_in":["0:1.9.5p2-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sudo","fixed_in":["0:1.8.29-7.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-7.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-7.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sudo","fixed_in":["0:1.8.29-7.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-7.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-7.el8_4.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo","fixed_in":["0:1.8.29-5.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-5.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-5.el8_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sudo","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"sudo","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"sudo","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-1.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-10.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-10.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"sudo-python-plugin","fixed_in":["0:1.9.5p2-10.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-10.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"sudo","fixed_in":["0:1.9.5p2-10.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-10.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-10.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-10.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-9.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-9.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"sudo-python-plugin","fixed_in":["0:1.9.5p2-9.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-9.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sudo","fixed_in":["0:1.9.5p2-9.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-9.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-9.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-9.el9_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-7.el9_0.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-7.el9_0.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"sudo-python-plugin","fixed_in":["0:1.9.5p2-7.el9_0.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-7.el9_0.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"sudo","fixed_in":["0:1.9.5p2-7.el9_0.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-7.el9_0.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-7.el9_0.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-7.el9_0.5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sudo","fixed_in":["0:1.9.5p2-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sudo","fixed_in":["0:1.9.5p2-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-1.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"sudo","fixed_in":["0:1.8.23-10.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debuginfo","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debugsource","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-python-plugin-debuginfo","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"sudo","fixed_in":["0:1.9.5p2-1.el8_10.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"sudo","fixed_in":["0:1.9.5p2-10.el9_6.1"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:20.04","package":"sudo","fixed_in":["1.8.31-1ubuntu1.5.aikido.1","1.8.31-1ubuntu1.5.aikido.2"],"sources":["osv"]},{"ecosystem":"Root:Ubuntu:20.04","package":"rootio-sudo","fixed_in":["1.8.31-1ubuntu1.5.aikido.1","1.8.31-1ubuntu1.5.aikido.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"sudo","fixed_in":["1.8.27-4.54.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"sudo","fixed_in":["1.8.27-4.54.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"sudo","fixed_in":["1.9.5p2-150300.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"sudo","fixed_in":["1.9.5p2-150300.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"sudo","fixed_in":["1.9.5p2-150300.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"sudo","fixed_in":["1.9.5p2-150300.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"sudo","fixed_in":["1.9.5p2-150300.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"sudo","fixed_in":["1.9.5p2-150300.3.36.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sudo","fixed_in":["1.9.9-150400.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"sudo","fixed_in":["1.9.9-150400.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"sudo","fixed_in":["1.9.9-150400.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"sudo","fixed_in":["1.9.9-150400.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"sudo","fixed_in":["1.9.9-150400.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"sudo","fixed_in":["1.9.9-150400.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"sudo","fixed_in":["1.9.9-150400.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"sudo","fixed_in":["1.9.9-150400.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"sudo","fixed_in":["1.9.12p1-150500.7.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"sudo","fixed_in":["1.9.12p1-150500.7.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"sudo","fixed_in":["1.9.12p1-150500.7.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"sudo","fixed_in":["1.9.12p1-150500.7.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"sudo","fixed_in":["1.9.12p1-150500.7.13.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","fixed_in":["1.8.9p5-1ubuntu1.5+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sudo","fixed_in":["1.8.16-0ubuntu1.10+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sudo","fixed_in":["1.8.21p2-3ubuntu1.6+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sudo","fixed_in":["1.8.31-1ubuntu1.5+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"sudo","fixed_in":["1.9.9-1ubuntu2.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"sudo","fixed_in":["1.9.15p5-3ubuntu5.24.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.12_p1-r1"},{"fixed":"1.9.15_p5-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.16_p2-r1"},{"fixed":"1.9.17_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.13_p3-r0"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-1.el8.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.29-7.el8_4.1.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:20.04","package":"sudo-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"sudo-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.6+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.11+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"sudo-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.11+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1+deb10u6+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"sudo-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1+deb10u6+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-1+deb12u2"}]}],"versions":["1.9.13p3-1","1.9.13p3-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.16p2-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.16p2-3"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-3+deb11u2"}]}],"versions":["1.9.5p2-3","1.9.5p2-3+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.13p3-1+deb12u2"}]}],"versions":["1.9.13p3-1","1.9.13p3-1+deb12u1"]},{"source":"osv","ecosystem":"Mageia:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-1.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-19.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.8p2-19.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-4.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-4.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-18.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-4.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-7.el8_4.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-9.el9_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-7.el9_0.5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-1.el8_10.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.5p2-10.el9_6.1"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:20.04","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.5.aikido.1"},{"fixed":"1.8.31-1ubuntu1.5.aikido.2"}]}]},{"source":"osv","ecosystem":"Root:Ubuntu:20.04","package":"rootio-sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.5.aikido.1"},{"fixed":"1.8.31-1ubuntu1.5.aikido.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.54.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.54.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-150300.3.36.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-150400.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.12p1-150500.7.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9p5-1ubuntu1.5+esm8"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5","1.8.9p5-1ubuntu1.5+esm6","1.8.9p5-1ubuntu1.5+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.10+esm3"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7","1.8.16-0ubuntu1.8","1.8.16-0ubuntu1.9","1.8.16-0ubuntu1.10","1.8.16-0ubuntu1.10+esm1","1.8.16-0ubuntu1.10+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.6+esm1"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1","1.8.21p2-3ubuntu1.1","1.8.21p2-3ubuntu1.2","1.8.21p2-3ubuntu1.3","1.8.21p2-3ubuntu1.4","1.8.21p2-3ubuntu1.5","1.8.21p2-3ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.5+esm1"}]}],"versions":["1.8.27-1ubuntu4","1.8.29-1ubuntu1","1.8.31-1ubuntu1","1.8.31-1ubuntu1.1","1.8.31-1ubuntu1.2","1.8.31-1ubuntu1.4","1.8.31-1ubuntu1.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1ubuntu2.5"}]}],"versions":["1.9.5p2-3ubuntu2","1.9.9-1ubuntu2","1.9.9-1ubuntu2.1","1.9.9-1ubuntu2.2","1.9.9-1ubuntu2.3","1.9.9-1ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-3ubuntu5.24.04.1"}]}],"versions":["1.9.14p2-1ubuntu1","1.9.15p5-3ubuntu1","1.9.15p5-3ubuntu3","1.9.15p5-3ubuntu4","1.9.15p5-3ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1ubuntu2.5"}]}],"versions":["1.9.5p2-3ubuntu2","1.9.9-1ubuntu2","1.9.9-1ubuntu2.1","1.9.9-1ubuntu2.2","1.9.9-1ubuntu2.3","1.9.9-1ubuntu2.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-3ubuntu5.24.04.1"}]}],"versions":["1.9.14p2-1ubuntu1","1.9.15p5-3ubuntu1","1.9.15p5-3ubuntu3","1.9.15p5-3ubuntu4","1.9.15p5-3ubuntu5"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9p5-1ubuntu1.5+esm8"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5","1.8.9p5-1ubuntu1.5+esm6","1.8.9p5-1ubuntu1.5+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.10+esm3"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7","1.8.16-0ubuntu1.8","1.8.16-0ubuntu1.9","1.8.16-0ubuntu1.10","1.8.16-0ubuntu1.10+esm1","1.8.16-0ubuntu1.10+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.6+esm1"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1","1.8.21p2-3ubuntu1.1","1.8.21p2-3ubuntu1.2","1.8.21p2-3ubuntu1.3","1.8.21p2-3ubuntu1.4","1.8.21p2-3ubuntu1.5","1.8.21p2-3ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.5+esm1"}]}],"versions":["1.8.27-1ubuntu4","1.8.29-1ubuntu1","1.8.31-1ubuntu1","1.8.31-1ubuntu1.1","1.8.31-1ubuntu1.2","1.8.31-1ubuntu1.4","1.8.31-1ubuntu1.5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17p1-1.1"}]}],"bundled":2}],"products":[{"vendor":"siemens","product":"sidis secured smartplug"},{"vendor":"sudo project","product":"sudo"},{"vendor":"sudo_project","product":"sudo"}],"references":[{"url":"https://www.sudo.ws/security/advisories/","tags":["Vendor Advisory","advisory"]},{"url":"https://www.sudo.ws/releases/changelog/","tags":["Release Notes","web"]},{"url":"https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host","tags":["Exploit","Third Party Advisory","web"]},{"url":"https://www.openwall.com/lists/oss-security/2025/06/30/2","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://ubuntu.com/security/notices/USN-7604-1","tags":["advisory"]},{"url":"https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/","tags":["Third Party Advisory","article"]},{"url":"https://www.sudo.ws/security/advisories/host_any/","tags":["advisory","article","report"]},{"url":"https://lists.debian.org/debian-security-announce/2025/msg00118.html","tags":["web"]},{"url":"https://explore.alas.aws.amazon.com/CVE-2025-32462.html","tags":["web"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32462","tags":["web"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32462","tags":["web","advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32462.html","tags":["web"]},{"url":"https://access.redhat.com/security/cve/cve-2025-32462","tags":["web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/06/msg00033.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32462","tags":["web","advisory"]},{"url":"https://www.sudo.ws/releases/changelog"},{"url":"https://www.sudo.ws/security/advisories"},{"url":"https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463"},{"url":"https://www.sudo.ws/security/advisories/host_any"},{"url":"https://github.com/advisories/GHSA-c5x2-97hm-x895"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-32462","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10110","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32462","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374692","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-10110.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32463","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374693","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-11537.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:9978","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-9978.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-32462","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2025-9","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1751893905.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1751895848.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2025-1751900234.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1751913242.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2025-1751913478.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2025-1751913630.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1752746954.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2025-1753799090.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2025-1753799668.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1753799801.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761325294.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790600964.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790601456.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790606589.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32462.json","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0213.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34409","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/06/30/3","tags":["web"]},{"url":"https://thehackernews.com/2025/07/critical-sudo-vulnerabilities-let-local.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1733","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1734","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32463","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1736","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1737","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1759","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374692","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10110.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32462","tags":["advisory","report"]},{"url":"https://www.stratascale.com/resource/cve-2025-32462-sudo-host-option-vulnerability/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10383","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10383.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10518","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10518.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10520","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10520.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10707","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10707.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10779","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10779.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10835","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10835.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10836","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10836.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10871","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10871.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374693","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11537.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32463","tags":["advisory"]},{"url":"https://www.stratascale.com/resource/cve-2025-32463-sudo-chroot-elevation-of-privilege/","tags":["article"]},{"url":"https://www.sudo.ws/security/advisories/chroot_bug/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9978.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:10110","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:11537","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:9978","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502174-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1245274","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32462","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502175-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1245275","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32463","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502178-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502179-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520478-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520489-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32462","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7604-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32463","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32462","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-07-14T12:41:06.361Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:32:46.42892Z"}],"euvd":[{"id":"EUVD-2025-20867","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-07-14T12:41:06Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T18:20:00.206712Z"}],"ghsa":[{"id":"GHSA-c5x2-97hm-x895","title":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the...","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T21:30:54Z","modified":"2026-07-14T15:31:24Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:09:27.031Z"}],"nvd":[{"id":"CVE-2025-32462","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T21:15:30.08Z","modified":"2026-07-14T13:17:33.347Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:11:15.754475Z"}],"osv":[{"id":"ALPINE-CVE-2025-32462","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T21:15:30.08Z","modified":"2026-11-03T06:33:00.44603185Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2025-32462","status":"published","published":"2025-07-01T05:59:46.31886Z","modified":"2026-01-26T09:39:07.93282Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-32462","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-10-28T02:30:26.875494971Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-32462","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T21:15:30.08Z","modified":"2026-09-01T20:05:45.957086741Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1733","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:52.935583675Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1734","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:52.508716112Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1735","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)\n\nA vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:01.948380281Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1736","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)\n\nA vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:01.895327622Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1737","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:52.334036658Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1759","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)\n\nA vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)","status":"published","published":"2025-07-11T11:08:50Z","modified":"2026-08-18T01:18:52.039830166Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHSA-2025:10110","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-02T10:03:33Z","modified":"2026-10-14T10:06:28Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10383","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-08T10:04:09Z","modified":"2026-10-14T10:06:38Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10518","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-08T10:04:14Z","modified":"2026-10-14T10:06:38Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10520","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-08T10:04:14Z","modified":"2026-10-14T10:06:39Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10707","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-10T10:05:03Z","modified":"2026-10-14T10:06:45Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10779","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-11T10:06:05Z","modified":"2026-10-14T10:06:46Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10835","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-14T10:02:36Z","modified":"2026-10-14T10:06:47Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10836","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-14T10:02:36Z","modified":"2026-10-14T10:06:47Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10871","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-15T10:07:59Z","modified":"2026-10-14T10:06:49Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:11537","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-23T10:02:50Z","modified":"2026-10-14T10:06:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RHSA-2025:9978","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-01T10:06:01Z","modified":"2026-10-14T10:12:01Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:10110","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: LPE via host option (CVE-2025-32462)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:26.98262Z","modified":"2025-07-29T14:59:57.049653Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:11537","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: LPE via host option (CVE-2025-32462)\n\n* sudo: LPE via chroot option (CVE-2025-32463)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:46.341213Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2025:9978","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: LPE via host option (CVE-2025-32462)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-07T17:39:57.81196Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"ROOT-OS-UBUNTU-2004-CVE-2025-32462","title":"CVE-2025-32462 in sudo - Patched by Root","description":"Root has patched CVE-2025-32462 in the sudo package for Root:Ubuntu:20.04. Multiple fixed versions available.","status":"published","published":"2026-08-19T12:01:02Z","modified":"2026-08-19T15:15:18.970901508Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:33.943322Z"},{"id":"UBUNTU-CVE-2025-32462","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T16:00:00Z","modified":"2026-02-04T04:17:33.713354Z","cvss":[{"version":"3.1","score":2.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"low"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"ALSA-2025:10110","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.  \n\nSecurity Fix(es):  \n\n  * sudo: LPE via host option (CVE-2025-32462)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-01T00:00:00Z","modified":"2026-10-29T11:02:22.17313226Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:11537","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.  \n\nSecurity Fix(es):  \n\n  * sudo: LPE via host option (CVE-2025-32462)\n  * sudo: LPE via chroot option (CVE-2025-32463)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-22T00:00:00Z","modified":"2026-10-29T11:58:17.959708Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2025:9978","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.  \n\nSecurity Fix(es):  \n\n  * sudo: LPE via host option (CVE-2025-32462)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-10-29T11:32:30.130791361Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"AZL-64449","title":"CVE-2025-32462 affecting package sudo for versions less than 1.9.17-1","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T21:15:30Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.66471Z"},{"id":"AZL-64461","title":"CVE-2025-32462 affecting package sudo for versions less than 1.9.17-1","description":"Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.","status":"published","published":"2025-06-30T21:15:30Z","modified":"2026-04-21T04:32:25.096897Z","updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"CLSA-2025-1751893905","title":"sudo: Fix of CVE-2025-32462","description":"- CVE-2025-32462: fix privilege escalation vulnerability by restricting\n  unauthorized users from gaining elevated system privileges via the Sudo host\n  option","status":"published","published":"2025-07-07T13:11:49Z","modified":"2026-06-01T00:33:26.140245359Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751895848","title":"sudo: Fix of CVE-2025-32462","description":"- CVE-2025-32462: fix privilege escalation vulnerability by restricting\n  unauthorized users from gaining elevated system privileges via the Sudo host\n  option","status":"published","published":"2025-07-07T13:44:13Z","modified":"2026-06-01T00:33:27.524455815Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751900234","title":"sudo: Fix of CVE-2025-32462","description":"- CVE-2025-32462: fix privilege escalation vulnerability by restricting\n  unauthorized users from gaining elevated system privileges via the Sudo host\n  option","status":"published","published":"2025-07-07T14:57:19Z","modified":"2026-06-01T00:33:17.919453815Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751913242","title":"sudo: Fix of CVE-2025-32462","description":"- CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option","status":"published","published":"2025-07-07T18:34:07Z","modified":"2026-06-01T00:32:58.845990343Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751913478","title":"sudo: Fix of CVE-2025-32462","description":"- CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option","status":"published","published":"2025-07-14T16:47:29Z","modified":"2026-06-01T00:33:21.255453163Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1751913630","title":"sudo: Fix of CVE-2025-32462","description":"- CVE-2025-32462: fix Local Privilege Escalation vulnerability via host option","status":"published","published":"2025-07-07T18:40:34Z","modified":"2026-06-01T00:33:13.384790199Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2025-1752746954","title":"sudo: Fix of CVE-2025-32462","description":"- CVE-2025-32462: prevent listed users from executing commands on unintended\n  machines by updating sudoers file validation","status":"published","published":"2025-07-17T10:09:18Z","modified":"2026-06-01T00:31:06.433771938Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1753799090","title":"Fix CVE(s): CVE-2025-32462","description":"   * SECURITY UPDATE: restrict users from executing commands on unintended\n     machines\n     - debian/patches/CVE-2025-32462.patch: restricts --host usage to sudo -l only, preventing\n       bypass of host-based sudoers rules and avoiding unintended local privilege escalation\n     - CVE-2025-32462","status":"published","published":"2025-07-29T14:24:55Z","modified":"2026-06-04T10:03:56.934867Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1753799668","title":"Fix CVE(s): CVE-2025-32462","description":"   * SECURITY UPDATE: unauthorized commands execution on unintended hosts\n     - debian/patches/CVE-2025-32462.patch: restrict user from setting remote\n       host for command unless listing privileges\n     - CVE-2025-32462","status":"published","published":"2025-07-29T14:34:32Z","modified":"2026-06-04T10:04:26.019132Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1753799801","title":"Fix CVE(s): CVE-2025-32462","description":"   * SECURITY UPDATE: unauthorized command execution on remote hosts\n     - debian/patches/CVE-2025-32462.patch: restrict user from setting remote\n       host for command unless listing privileges\n     - CVE-2025-32462","status":"published","published":"2025-07-29T14:36:45Z","modified":"2026-06-04T10:04:26.37348Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2025-1761325294","title":"Fix CVE(s): CVE-2021-23240, CVE-2023-42465, CVE-2025-32462","description":"   * SECURITY UPDATE: privilege escalation via symlinks\n   - debian/patches/CVE-2021-23240.patch: fix opportunity for local\n     unprivileged user to gain file ownership via symlinks.\n   * SECURITY UPDATE: unauthorized commands execution on unintended hosts\n   - debian/patches/CVE-2025-32462.patch: restrict user from setting remote\n     host for command unless listing privileges\n   - CVE-2025-32462\n   * SECURITY UPDATE: row hammer attack\n   - debian/patches/CVE-2023-42465.patch: make return values resist to\n     single bit flips\n   - CVE-2023-42465","status":"published","published":"2025-10-24T17:01:38Z","modified":"2026-06-04T10:04:29.804548Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2026-1790600964","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-28T13:09:33Z","modified":"2026-10-26T09:43:39.785803477Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790601456","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-28T13:17:45Z","modified":"2026-10-26T09:43:13.516156002Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790606589","title":"sudo: Fix of 7 CVEs","description":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","status":"published","published":"2026-09-30T16:36:16Z","modified":"2026-10-26T09:43:53.696880037Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"DLA-4235-1","title":"sudo - security update","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-03-09T02:09:13.323485Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5954-1","title":"sudo - security update","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-03-09T02:08:48.508328Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0213","title":"Updated sudo packages fix security vulnerabilities","description":"CVE-2025-32462 - Sudo before 1.9.17p1, when used with a sudoers file that\nspecifies a host that is neither the current host nor ALL, allows listed\nusers to execute commands on unintended machines\nCVE-2025-32463 - Sudo before 1.9.17p1 allows local users to obtain root\naccess because \"/etc/nsswitch.conf\" from a user-controlled directory is\nused with the --chroot option.\n","status":"published","published":"2025-07-25T21:48:21Z","modified":"2026-04-16T04:43:21.687926479Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15298-1","title":"sudo-1.9.17p1-1.1 on GA media","description":"These are all security issues fixed in the sudo-1.9.17p1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:36.80765Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2025:02174-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).\n","status":"published","published":"2025-06-30T14:31:32Z","modified":"2025-07-01T12:59:35.074579Z","updated_at":"2026-11-02T15:53:56.647031Z"}]},"sources_more":{"osv":8}}