CVE-2025-32463

La versión 1.9.17 de Sudo tiene una vulnerabilidad crítica CVE-2025-32463 que permite a usuarios locales obtener acceso root explotando la opción chroot, lo que puede conllevar graves riesgos de seguridad. Se recomienda a los usuarios actualizar a la versión 1.9.17p1 o posterior para mitigar este...

sudo-chroot

Descripción: Sudo anterior a 1.9.17p1 permite a usuarios locales obtener acceso root porque /etc/nsswitch.conf de un directorio controlado por el usuario se utiliza con la opción --chroot. Sudo Privesc Local --chroot...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2021_4222)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214222 advisory. buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 Tenable has extracted the preceding description block direct...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc Multiple Vulnerabilities (crlsa-2021_4154)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214154 advisory. buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 containers/storage: DoS via malicious image...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon (ALMALINUX9.2:CLSA-2026:1780486587)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780486587 advisory. - Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes,...

Rocky Linux 10.0 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc Multiple Vulnerabilities (crlsa-2025_11537)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511537 advisory. sudo: LPE via host option CVE-2025-32462 sudo: LPE via chroot option CVE-2025-32463 Tenable has extracted the preceding description block directly from...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon (ALMALINUX9.2:CLSA-2026:1780945931)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780945931 advisory. - Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list...

Rocky Linux 8 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2021_4221)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214221 advisory. buildah: Host environment variables leaked in build container when using chroot isolation CVE-2021-3602 Tenable has extracted the preceding description block direct...

rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

A flaw was found in rsync. This vulnerability allows remote clients to bypass path confinement, a security measure designed to restrict file access. By crafting specific paths that include a '/./' boundary marker within a chroot environment, an attacker can gain unauthorized read or write access ...

CVE-2025-32463_sudo_chroot

CVE-2025-32463 - sudo chroot Uso El Dockerfile crea un entorno de prueba seguro y aislado con una versión vulnerable de sudo 1.9.16p2 instalada. Esto permite probar el exploit sin afectar su sistema anfitrión. Build the vulnerable test environment docker build -t cve . Run the container creates a...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Sudo特権昇格 sudoにおける特権昇格の脆弱性が、Linux/Unix系システムに影響を与えます。この欠陥は、sudoが-R（--chroot）オプションと共に使用された際の不適切なパス検証 に起因し、攻撃者が悪意のあるNSSライブラリのロードを介してrootに昇格することを可能にします。 根本原因 sudoがchroot環境 （-Rオプション）内でコマンドを実行する際、エラー状態でのNSS Name Service Switch ライブラリの読み込み を誤って処理します。...

rsync: rsync: Unauthorized File Access via Symlink Module Root

A flaw was found in rsync. This path traversal vulnerability allows remote clients to access files outside the intended module root. This occurs when the use chroot option is disabled and the module root path, or a component of it, is a symbolic link. The rsync daemon fails to resolve symlinks...

rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

A flaw was found in rsync. This vulnerability allows remote clients to bypass path confinement, a security measure designed to restrict file access. By crafting specific paths that include a '/./' boundary marker within a chroot environment, an attacker can gain unauthorized read or write access ...

rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

A flaw was found in rsync. This vulnerability allows remote clients to bypass path confinement, a security measure designed to restrict file access. By crafting specific paths that include a '/./' boundary marker within a chroot environment, an attacker can gain unauthorized read or write access ...

rsync: rsync: Unauthorized File Access via Symlink Module Root

A flaw was found in rsync. This path traversal vulnerability allows remote clients to access files outside the intended module root. This occurs when the use chroot option is disabled and the module root path, or a component of it, is a symbolic link. The rsync daemon fails to resolve symlinks...

EulerOS 2.0 SP12 : rsync (EulerOS-SA-2026-3308)

According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement wh...

Security update for erlang

This update for erlang fixes the following issue: CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in SFTP chroot bsc1262503. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:3951-1 Security update for erlang

This update for erlang fixes the following issue: - CVE-2026-32147: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in SFTP chroot bsc1262503...

CVE-2025-32463

Exploit CVE-2025-32463 Panoramica Questo repository fornisce un tool di exploit basato su Go per CVE-2025-32463 , una vulnerabilità critica di escalation dei privilegi locali CVSS 9.3 nelle versioni di sudo 1.9.14 fino a 1.9.17. Consente a utenti locali non autorizzati di ottenere accesso root...

openSUSE 16 Security Update : rsync (openSUSE-SU-2026:21650-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21650-1 advisory. - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist bsc1269041. - CVE-2026-53784: Daemon...