{"id":"CVE-2025-32463","aliases":["ALPINE-CVE-2025-32463","ALSA-2025:11537","AZL-64458","AZL-64464","BELL-CVE-2025-32463","DEBIAN-CVE-2025-32463","EUVD-2025-19673","GHSA-695j-c63m-mvxc","MGASA-2025-0213","OESA-2025-1735","OESA-2025-1736","OESA-2025-1759","RHSA-2025:11537","RLSA-2025:11537","SUSE-SU-2025:02177-1","SUSE-SU-2025:20478-1","SUSE-SU-2025:20489-1","UBUNTU-CVE-2025-32463","USN-7604-1","openSUSE-SU-2025:15298-1"],"status":"published","title":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a...","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","severity":{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.563,"percentile":0.99059,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-829"],"published":"2025-06-30T00:00:00Z","modified":"2026-11-05T05:40:51Z","kev":{"date_added":"2025-09-29","due_date":"2025-10-20","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-09-29"},{"source":"kev","since":"2025-09-29"}],"exploits":[{"source":"metasploit","id":"exploit/linux/local/sudo_chroot_cve_2025_32463","title":"Sudo Chroot 1.9.17 Privilege Escalation","type":"exploit","platform":"Linux","date":"2025-06-30","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/sudo_chroot_cve_2025_32463"},{"source":"pocgithub","id":"4f-kira/CVE-2025-32463","title":"4f-kira/CVE-2025-32463","date":"2025-07-01","url":"https://github.com/4f-kira/CVE-2025-32463"},{"source":"pocgithub","id":"7r00t/cve-2025-32463-lab","title":"7r00t/cve-2025-32463-lab","date":"2025-07-01","url":"https://github.com/7r00t/cve-2025-32463-lab"},{"source":"pocgithub","id":"IC3-512/linux-root-kit","title":"IC3-512/linux-root-kit","date":"2025-07-01","url":"https://github.com/IC3-512/linux-root-kit"},{"source":"pocgithub","id":"K1tt3h/CVE-2025-32463-POC","title":"K1tt3h/CVE-2025-32463-POC","date":"2025-07-01","url":"https://github.com/K1tt3h/CVE-2025-32463-POC"},{"source":"pocgithub","id":"pr0v3rbs/CVE-2025-32463_chwoot","title":"pr0v3rbs/CVE-2025-32463_chwoot","date":"2025-07-01","url":"https://github.com/pr0v3rbs/CVE-2025-32463_chwoot"},{"source":"pocgithub","id":"SysMancer/CVE-2025-32463","title":"SysMancer/CVE-2025-32463","date":"2025-07-02","url":"https://github.com/SysMancer/CVE-2025-32463"},{"source":"pocgithub","id":"kh4sh3i/CVE-2025-32463","title":"kh4sh3i/CVE-2025-32463","date":"2025-07-02","url":"https://github.com/kh4sh3i/CVE-2025-32463"},{"source":"pocgithub","id":"neko205-mx/CVE-2025-32463_Exploit","title":"neko205-mx/CVE-2025-32463_Exploit","date":"2025-07-02","url":"https://github.com/neko205-mx/CVE-2025-32463_Exploit"},{"source":"pocgithub","id":"pevinkumar10/CVE-2025-32463","title":"pevinkumar10/CVE-2025-32463","date":"2025-07-02","url":"https://github.com/pevinkumar10/CVE-2025-32463"},{"source":"pocgithub","id":"robbert1978/CVE-2025-32463_POC","title":"robbert1978/CVE-2025-32463_POC","date":"2025-07-02","url":"https://github.com/robbert1978/CVE-2025-32463_POC"},{"source":"pocgithub","id":"zhaduchanhzz/CVE-2025-32463_POC","title":"zhaduchanhzz/CVE-2025-32463_POC","date":"2025-07-02","url":"https://github.com/zhaduchanhzz/CVE-2025-32463_POC"},{"source":"pocgithub","id":"0xAkarii/CVE-2025-32463","title":"0xAkarii/CVE-2025-32463","date":"2025-07-03","url":"https://github.com/0xAkarii/CVE-2025-32463"},{"source":"pocgithub","id":"CIA911/sudo_patch_CVE-2025-32463","title":"CIA911/sudo_patch_CVE-2025-32463","date":"2025-07-03","url":"https://github.com/CIA911/sudo_patch_CVE-2025-32463"},{"source":"pocgithub","id":"Mikivirus0/sudoinjection","title":"Mikivirus0/sudoinjection","date":"2025-07-03","url":"https://github.com/Mikivirus0/sudoinjection"},{"source":"pocgithub","id":"mirchr/CVE-2025-32463-sudo-chwoot","title":"mirchr/CVE-2025-32463-sudo-chwoot","date":"2025-07-03","url":"https://github.com/mirchr/CVE-2025-32463-sudo-chwoot"},{"source":"pocgithub","id":"san8383/CVE-2025-32463","title":"san8383/CVE-2025-32463","date":"2025-07-03","url":"https://github.com/san8383/CVE-2025-32463"},{"source":"pocgithub","id":"0p5cur/CVE-2025-32463-POC","title":"0p5cur/CVE-2025-32463-POC","date":"2025-07-04","url":"https://github.com/0p5cur/CVE-2025-32463-POC"},{"source":"pocgithub","id":"ill-deed/CVE-2025-32463_illdeed","title":"ill-deed/CVE-2025-32463_illdeed","date":"2025-07-04","url":"https://github.com/ill-deed/CVE-2025-32463_illdeed"},{"source":"pocgithub","id":"zinzloun/CVE-2025-32463","title":"zinzloun/CVE-2025-32463","date":"2025-07-04","url":"https://github.com/zinzloun/CVE-2025-32463"},{"source":"pocgithub","id":"gmh5225/Blackash-CVE-2025-32463","title":"gmh5225/Blackash-CVE-2025-32463","date":"2025-07-05","url":"https://github.com/gmh5225/Blackash-CVE-2025-32463"},{"source":"pocgithub","id":"Chocapikk/CVE-2025-32463-lab","title":"Chocapikk/CVE-2025-32463-lab","date":"2025-07-06","url":"https://github.com/Chocapikk/CVE-2025-32463-lab"},{"source":"pocgithub","id":"FreeDurok/CVE-2025-32463-PoC","title":"FreeDurok/CVE-2025-32463-PoC","date":"2025-07-06","url":"https://github.com/FreeDurok/CVE-2025-32463-PoC"},{"source":"exploitdb","id":"EDB-52352","title":"Sudo chroot 1.9.17 - Local Privilege Escalation","type":"local","platform":"linux","date":"2025-07-08","url":"https://www.exploit-db.com/exploits/52352"},{"source":"pocgithub","id":"SpongeBob-369/cve-2025-32463","title":"SpongeBob-369/cve-2025-32463","date":"2025-07-08","url":"https://github.com/SpongeBob-369/cve-2025-32463"},{"source":"pocgithub","id":"abrewer251/CVE-2025-32463_Sudo_PoC","title":"abrewer251/CVE-2025-32463_Sudo_PoC","date":"2025-07-08","url":"https://github.com/abrewer251/CVE-2025-32463_Sudo_PoC"},{"source":"pocgithub","id":"lowercasenumbers/CVE-2025-32463_sudo_chroot","title":"lowercasenumbers/CVE-2025-32463_sudo_chroot","date":"2025-07-08","url":"https://github.com/lowercasenumbers/CVE-2025-32463_sudo_chroot"}],"exploits_more":45,"fixes":[{"ecosystem":"Alpine:v3.21","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"sudo","fixed_in":["1.9.17-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"sudo","fixed_in":["1.9.17-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"sudo","fixed_in":["1.9.15_p5-r1"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"sudo","fixed_in":["1.9.17_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"sudo","fixed_in":["1.9.17_p1-r0"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.9.16p2-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.9.16p2-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"sudo","fixed_in":["1.9.15p5-3ubuntu5.24.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.14"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.14"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.14"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.14"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:10","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.15_p5-r0"},{"fixed":"1.9.15_p5-r1"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.16_p2-r1"},{"fixed":"1.9.17_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.14_p2-r0"},{"fixed":"1.9.17_p1-r0"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.16p2-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.16p2-3"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-1.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-4.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-4.oe2403sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-4.oe2403sp2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo-python-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo-python-plugin-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.15-8.p5.el10_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-150600.3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-3ubuntu5.24.04.1"}]}],"versions":["1.9.14p2-1ubuntu1","1.9.15p5-3ubuntu1","1.9.15p5-3ubuntu3","1.9.15p5-3ubuntu4","1.9.15p5-3ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1ubuntu2.5"}]}],"versions":["1.9.5p2-3ubuntu2","1.9.9-1ubuntu2","1.9.9-1ubuntu2.1","1.9.9-1ubuntu2.2","1.9.9-1ubuntu2.3","1.9.9-1ubuntu2.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15p5-3ubuntu5.24.04.1"}]}],"versions":["1.9.14p2-1ubuntu1","1.9.15p5-3ubuntu1","1.9.15p5-3ubuntu3","1.9.15p5-3ubuntu4","1.9.15p5-3ubuntu5"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.17p1-1.1"}]}],"bundled":2}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"opensuse","product":"leap"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"sudo","product":"sudo"},{"vendor":"sudo project","product":"sudo"},{"vendor":"sudo_project","product":"sudo"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_real_time"},{"vendor":"suse","product":"linux_enterprise_server_for_sap"}],"references":[{"url":"https://www.sudo.ws/security/advisories/","tags":["Vendor Advisory","advisory"]},{"url":"https://www.sudo.ws/releases/changelog/","tags":["Release Notes","web"]},{"url":"https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot","tags":["Exploit","Third Party Advisory","web"]},{"url":"https://www.openwall.com/lists/oss-security/2025/06/30/3","tags":["Third Party Advisory","web"]},{"url":"https://access.redhat.com/security/cve/cve-2025-32463","tags":["Third Party Advisory","web"]},{"url":"https://ubuntu.com/security/notices/USN-7604-1","tags":["Third Party Advisory","advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32463","tags":["Third Party Advisory","web","advisory"]},{"url":"https://explore.alas.aws.amazon.com/CVE-2025-32463.html","tags":["Third Party Advisory","web"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463","tags":["Issue Tracking","Third Party Advisory","web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/","tags":["Third Party Advisory","web","advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32463.html","tags":["Third Party Advisory","web"]},{"url":"https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/","tags":["Exploit","Third Party Advisory","article"]},{"url":"https://www.sudo.ws/security/advisories/chroot_bug/","tags":["Vendor Advisory","advisory","article","report"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2025-32463-detect-sudo-vulnerability","tags":["Third Party Advisory","web"]},{"url":"https://www.vicarius.io/vsociety/posts/cve-2025-32463-mitigate-sudo-vulnerability","tags":["Mitigation","Third Party Advisory","web"]},{"url":"https://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/","tags":["exploit","Third Party Advisory","evidence"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32463","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32463","tags":["web","advisory"]},{"url":"https://www.sudo.ws/releases/changelog"},{"url":"https://www.sudo.ws/security/advisories"},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1"},{"url":"https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463"},{"url":"https://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root"},{"url":"https://www.sudo.ws/security/advisories/chroot_bug"},{"url":"https://github.com/advisories/GHSA-695j-c63m-mvxc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-32463","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:11537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32462","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32463","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374692","tags":["report"]},{"url":"https://bugzilla.redhat.com/2374693","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-11537.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2025-32463","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2025-9","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32463.json","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0213.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34409","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/06/30/2","tags":["web"]},{"url":"https://thehackernews.com/2025/07/critical-sudo-vulnerabilities-let-local.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32462","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1736","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1759","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374692","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2374693","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_11537.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32462","tags":["advisory"]},{"url":"https://www.stratascale.com/resource/cve-2025-32462-sudo-host-option-vulnerability/","tags":["article"]},{"url":"https://www.sudo.ws/security/advisories/host_any/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32463","tags":["advisory","report"]},{"url":"https://www.stratascale.com/resource/cve-2025-32463-sudo-chroot-elevation-of-privilege/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://errata.rockylinux.org/RLSA-2025:11537","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1245274","tags":["report"]},{"url":"https://bugzilla.suse.com/1245275","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32463","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520478-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520489-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32462","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32463","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-02-26T17:50:20.931Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:32:46.42892Z"}],"euvd":[{"id":"EUVD-2025-19673","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-02-26T17:50:20Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2025-09-29","updated_at":"2026-11-02T19:48:19.481461Z"}],"ghsa":[{"id":"GHSA-695j-c63m-mvxc","title":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a...","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T21:30:54Z","modified":"2025-10-22T00:34:26Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T15:04:09.266545Z"}],"kev":[{"id":"CVE-2025-32463","title":"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","description":"Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.","cwes":["CWE-829"],"kev":{"date_added":"2025-09-29","due_date":"2025-10-20","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2025-32463","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T21:15:30.257Z","modified":"2026-06-17T09:12:02.147Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:11:15.754475Z"}],"osv":[{"id":"ALPINE-CVE-2025-32463","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T21:15:30.257Z","modified":"2026-11-03T06:33:00.398069479Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2025-32463","status":"published","published":"2025-07-01T05:59:46.189832Z","modified":"2026-01-26T09:39:08.664149Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:21.741325Z"},{"id":"CVE-2025-32463","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T00:00:00Z","modified":"2026-10-28T02:31:08.443610387Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T15:44:48.02508Z"},{"id":"DEBIAN-CVE-2025-32463","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T21:15:30.257Z","modified":"2026-09-01T20:05:45.910235694Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1735","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)\n\nA vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:01.948380281Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1736","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)\n\nA vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)","status":"published","published":"2025-07-04T11:08:49Z","modified":"2026-08-18T01:18:01.895327622Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"OESA-2025-1759","title":"sudo security update","description":"Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity.  The basic philosophy is to give as few privileges as possible but still allow people to get their work done.\r\n\r\nSecurity Fix(es):\n\nSudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)\n\nA vulnerability has been found in Todd Miller sudo 1.9.14/1.9.15/1.9.16/1.9.17 (Operating System Utility Software) and classified as critical.The manipulation of the argument -R/--chroot with an unknown input leads to a unknown weakness. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.As an impact it is known to affect confidentiality, integrity, and availability.Applying the patch 1.9.17p1 is able to eliminate this problem.(CVE-2025-32463)","status":"published","published":"2025-07-11T11:08:50Z","modified":"2026-08-18T01:18:52.039830166Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:43.127925Z"},{"id":"RHSA-2025:11537","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2025-07-23T10:02:50Z","modified":"2026-10-14T10:06:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.599955Z"},{"id":"RLSA-2025:11537","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: LPE via host option (CVE-2025-32462)\n\n* sudo: LPE via chroot option (CVE-2025-32463)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:46.341213Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"UBUNTU-CVE-2025-32463","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T16:00:00Z","modified":"2026-02-04T03:50:18.526937Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"ALSA-2025:11537","title":"Important: sudo security update","description":"The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.  \n\nSecurity Fix(es):  \n\n  * sudo: LPE via host option (CVE-2025-32462)\n  * sudo: LPE via chroot option (CVE-2025-32463)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-07-22T00:00:00Z","modified":"2026-10-29T11:58:17.959708Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"AZL-64458","title":"CVE-2025-32463 affecting package sudo for versions less than 1.9.17-1","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T21:15:30Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:23.66471Z"},{"id":"AZL-64464","title":"CVE-2025-32463 affecting package sudo for versions less than 1.9.17-1","description":"Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.","status":"published","published":"2025-06-30T21:15:30Z","modified":"2026-04-21T04:32:25.67027Z","updated_at":"2026-11-02T15:28:08.076947Z"},{"id":"MGASA-2025-0213","title":"Updated sudo packages fix security vulnerabilities","description":"CVE-2025-32462 - Sudo before 1.9.17p1, when used with a sudoers file that\nspecifies a host that is neither the current host nor ALL, allows listed\nusers to execute commands on unintended machines\nCVE-2025-32463 - Sudo before 1.9.17p1 allows local users to obtain root\naccess because \"/etc/nsswitch.conf\" from a user-controlled directory is\nused with the --chroot option.\n","status":"published","published":"2025-07-25T21:48:21Z","modified":"2026-04-16T04:43:21.687926479Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15298-1","title":"sudo-1.9.17p1-1.1 on GA media","description":"These are all security issues fixed in the sudo-1.9.17p1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-03T00:00:00Z","modified":"2026-03-23T04:53:36.80765Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"SUSE-SU-2025:02177-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).\n- CVE-2025-32463: Fixed a possible local privilege Escalation via chroot option (bsc#1245275).\n","status":"published","published":"2025-06-30T17:53:06Z","modified":"2026-02-04T03:34:21.201287Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:20478-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2025-32462: Fix a possible local privilege escalation via the --host option (bsc#1245274)\n- CVE-2025-32463: Fix a possible local privilege Escalation via chroot option (bsc#1245275)\n","status":"published","published":"2025-07-15T14:48:17Z","modified":"2026-03-23T04:50:51.156104Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20489-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- CVE-2025-32462: Fix a possible local privilege escalation via the --host option (bsc#1245274)\n- CVE-2025-32463: Fix a possible local privilege Escalation via chroot option (bsc#1245275)\n","status":"published","published":"2025-07-10T12:49:58Z","modified":"2026-03-23T04:50:09.587248Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7604-1","title":"sudo vulnerabilities","description":"Rich Mirch discovered that Sudo incorrectly handled the host option. In\nenvironments where per-host rules are configured in the sudoers file, a\nlocal attacker could use this issue to bypass the host restrictions.\n(CVE-2025-32462)\n\nRich Mirch discovered that Sudo incorrectly handled the chroot option. In\nenvironments where the sudoers file is configured to allow the chroot\noption, a local attacker could use this issue to run arbitrary commands as\nroot. This issue only applied to Ubuntu 24.04 LTS, Ubuntu 24.10, and\nUbuntu 25.04. (CVE-2025-32463)","status":"published","published":"2025-06-30T14:47:26Z","modified":"2026-02-10T04:49:28Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}