CVE-2025-32463

KEV
Published: Giu 30, 2025 Last Modified: Nov 05, 2025 EU-VD ID: EUVD-2025-19673
ExploitDB:
Other exploit source:
Google Dorks:
CRITICAL 9,3
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: changed
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,1849
Percentile
1,0th
Updated

EPSS Score Trend (Last 90 Days)

829

Inclusion of Functionality from Untrusted Control Sphere

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
All platforms may be affected
View CWE Details
Exploit

Sudo chroot 1.9.17 - Local Privilege Escalation

Sudo chroot 1.9.17 - Local Privilege Escalation

Author: Stratascale Published:
View Exploit Code →
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 13.0
cpe:2.3:o:debian:debian_linux:13.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Server For Sap by Suse

Product Information
Vendor Suse
Product Linux Enterprise Server For Sap
Version 12
cpe:2.3:o:suse:linux_enterprise_server_for_sap:12:sp7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 22.04
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 24.10
cpe:2.3:o:canonical:ubuntu_linux:24.10:*:*:*:-:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Server For Sap by Suse

Product Information
Vendor Suse
Product Linux Enterprise Server For Sap
Version 12
cpe:2.3:o:suse:linux_enterprise_server_for_sap:12:sp6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 12.0
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Real Time by Suse

Product Information
Vendor Suse
Product Linux Enterprise Real Time
Version 15.0
cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 25.04
cpe:2.3:o:canonical:ubuntu_linux:25.04:*:*:*:-:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Leap by Opensuse

Product Information
Vendor Opensuse
Product Leap
Version 15.6
cpe:2.3:o:opensuse:leap:15.6:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Sudo by Sudo Project

Product Information
Vendor Sudo Project
Product Sudo
Version Range Affected
From 1.9.14 (inclusive)
To 1.9.17 (exclusive)
cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Desktop by Suse

Product Information
Vendor Suse
Product Linux Enterprise Desktop
Version 15
cpe:2.3:o:suse:linux_enterprise_desktop:15:sp7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Sudo by Sudo Project

Product Information
Vendor Sudo Project
Product Sudo
Version 1.9.17
cpe:2.3:a:sudo_project:sudo:1.9.17:-:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Desktop by Suse

Product Information
Vendor Suse
Product Linux Enterprise Desktop
Version 15
cpe:2.3:o:suse:linux_enterprise_desktop:15:sp6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Real Time by Suse

Product Information
Vendor Suse
Product Linux Enterprise Real Time
Version 15.0
cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Ubuntu Linux by Canonical

Product Information
Vendor Canonical
Product Ubuntu Linux
Version 24.04
cpe:2.3:o:canonical:ubuntu_linux:24.04:*:*:*:lts:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Enterprise Linux by Redhat

Product Information
Vendor Redhat
Product Enterprise Linux
Version 10.0
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Real Time by Suse

Product Information
Vendor Suse
Product Linux Enterprise Real Time
Version 15.0
cpe:2.3:o:suse:linux_enterprise_real_time:15.0:sp6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Debian Linux by Debian

Product Information
Vendor Debian
Product Debian Linux
Version 11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulner…
https://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hack…
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025…
https://access.redhat.com/security/cve/cve-2025-32463
https://access.redhat.com/security/cve/cve-2025-32463
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463
https://explore.alas.aws.amazon.com/CVE-2025-32463.html
https://explore.alas.aws.amazon.com/CVE-2025-32463.html
https://security-tracker.debian.org/tracker/CVE-2025-32463
https://security-tracker.debian.org/tracker/CVE-2025-32463
https://ubuntu.com/security/notices/USN-7604-1
https://ubuntu.com/security/notices/USN-7604-1
https://www.openwall.com/lists/oss-security/2025/06/30/3
https://www.openwall.com/lists/oss-security/2025/06/30/3
https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolv…
https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-…
https://www.stratascale.com/vulnerability-alert-CVE-2025-32…
https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot
https://www.sudo.ws/releases/changelog/
https://www.sudo.ws/releases/changelog/
https://www.sudo.ws/security/advisories/
https://www.sudo.ws/security/advisories/
https://www.sudo.ws/security/advisories/chroot_bug/
https://www.sudo.ws/security/advisories/chroot_bug/
https://www.suse.com/security/cve/CVE-2025-32463.html
https://www.suse.com/security/cve/CVE-2025-32463.html
https://www.suse.com/support/update/announcement/2025/suse-…
https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/
https://www.vicarius.io/vsociety/posts/cve-2025-32463-detec…
https://www.vicarius.io/vsociety/posts/cve-2025-32463-detect-sudo-vulnerability
https://www.vicarius.io/vsociety/posts/cve-2025-32463-mitig…
https://www.vicarius.io/vsociety/posts/cve-2025-32463-mitigate-sudo-vulnerabili…