Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL

🗓️ 11 Jul 2025 07:00:00Reported by MicrosoftType

Sudo prior to 1.9.17p1 allows escalation when sudoers lists a host not equal to current host or all.

Reporter	Title	Published	Views	Family All 275
FreeBSD	sudo -- privilege escalation vulnerability through host and chroot options	1 Apr 202500:00	–	freebsd
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	11 Jul 202507:47	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	25 Dec 202516:42	–	githubexploit
GithubExploit	Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo	5 Jul 202515:55	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	3 Jul 202515:53	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	28 Jul 202504:18	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	4 Jul 202520:04	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	10 Aug 202506:56	–	githubexploit
GithubExploit	Exploit for Incorrect Authorization in Sudo_Project Sudo	7 Jul 202511:04	–	githubexploit
IBM Security Bulletins	Security Bulletin: Vulnerability in sudo library (CVE-2025-32462) affects Power HMC.	9 Sep 202507:28	–	ibm