7.8

CVE-2025-32463

Warnung
Medienbericht
Exploit
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sudo Project ≫ Sudo Version >= 1.9.14 < 1.9.17
Sudo Project ≫ Sudo Version 1.9.17 Update -
Canonical ≫ Ubuntu Linux Version 22.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 24.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 24.10 SwEdition -
Canonical ≫ Ubuntu Linux Version 25.04 SwEdition -
Debian ≫ Debian Linux Version 11.0
Debian ≫ Debian Linux Version 12.0
Debian ≫ Debian Linux Version 13.0
Opensuse ≫ Leap Version 15.6
Redhat ≫ Enterprise Linux Version 10.0
Suse ≫ Linux Enterprise Desktop Version 15 Update sp6
Suse ≫ Linux Enterprise Desktop Version 15 Update sp7
Suse ≫ Linux Enterprise Real Time Version 15.0 Update sp2
Suse ≫ Linux Enterprise Real Time Version 15.0 Update sp6
Suse ≫ Linux Enterprise Real Time Version 15.0 Update sp7
Suse ≫ Linux Enterprise Server For Sap Version 12 Update sp6
Suse ≫ Linux Enterprise Server For Sap Version 12 Update sp7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login

29.09.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Schwachstelle

Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.

Beschreibung

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 58.76% 0.99
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
MITRE 9.3 2.5 6
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-829 Inclusion of Functionality from Untrusted Control Sphere

The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
09.08.2025 11:36
https://www.sudo.ws/security/advisories/
Vendor Advisory
https://www.sudo.ws/releases/changelog/
Release Notes
https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot
Third Party Advisory
Exploit
https://www.openwall.com/lists/oss-security/2025/06/30/3
Third Party Advisory
https://access.redhat.com/security/cve/cve-2025-32463
Third Party Advisory
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463
Third Party Advisory
Issue Tracking
https://explore.alas.aws.amazon.com/CVE-2025-32463.html
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2025-32463
Third Party Advisory
https://ubuntu.com/security/notices/USN-7604-1
Third Party Advisory
https://www.suse.com/security/cve/CVE-2025-32463.html
Third Party Advisory
https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/
Third Party Advisory
https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/
Third Party Advisory
Exploit
https://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/
Third Party Advisory
https://www.sudo.ws/security/advisories/chroot_bug/
Vendor Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-32463-detect-sudo-vulnerability
Third Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-32463-mitigate-sudo-vulnerability
Third Party Advisory
Mitigation
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32463
US Government Resource