CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-829

Description

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Sudo 1.9	1.9.14 → < 1.9.17p1	1.9.17p1

Autres CVE de Sudo

Les 3 CVE de Sudo →

CVE-2026-35535 In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop… 7.4 Élevée CVE-2025-32462 Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL,… 2.8 Faible