5079 matches found
USN-7604-1 sudo vulnerabilities
Rich Mirch discovered that Sudo incorrectly handled the host option. In environments where per-host rules are configured in the sudoers file, a local attacker could use this issue to bypass the host restrictions. CVE-2025-32462 Rich Mirch discovered that Sudo incorrectly handled the chroot option...
[SECURITY] [DLA 4235-1] sudo security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4235-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 30, 2025 https://wiki.debian.org/LTS -...
Security update for sudo
This update for sudo fixes the following issues: CVE-2025-32462: Fixed a possible local privilege escalation via the --host option bsc1245274. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...
SUSE-SU-2025:02175-1 Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option bsc1245274...
Security update for sudo
This update for sudo fixes the following issues: CVE-2025-32462: Fixed a possible local privilege escalation via the --host option bsc1245274. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...
SUSE-SU-2025:02174-1 Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option bsc1245274...
[SECURITY] [DSA 5954-1] sudo security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5954-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 30, 2025 https://www.debian.org/security/faq -...
CVE-2025-32462
A privilege escalation vulnerability was found in Sudo. In certain configurations, unauthorized users can gain elevated system privileges via the Sudo host option -h or --host. When using the default sudo security policy plugin sudoers, the host option is intended to be used in conjunction with t...
CVE-2025-32463
A flaw was found in Sudo. This flaw allows a local attacker to escalate their privileges by tricking Sudo into loading an arbitrary shared library using the user-specified root directory via the -R --chroot option. An attacker can run arbitrary commands as root on systems that support...
Slackware Linux 15.0 / current sudo Multiple Vulnerabilities (SSA:2025-181-01)
The version of sudo installed on the remote host is prior to 1.9.17p1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-181-01 advisory. New sudo packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...
CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option...
EUVD-2025-20867
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...
CVE-2025-32463
CVE-2025-32463 affects the sudo utility prior to 1.9.17p1. The vulnerability arises when /etc/nsswitch.conf is sourced from a user-controlled directory via the --chroot option, enabling local users to obtain root access. Connected sources also describe related behavior where a sudoers entry that ...
Debian dsa-5954 : libnss-sudo - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5954 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5954-1 [email protected] https://www.debian.org/security/...
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: LPE via host option CVE-2025-32462 For...
Sudo 安全漏洞
Sudo is a program used on Unix-like systems that allows users to execute commands with special privileges in a secure manner. A security vulnerability exists in versions of Sudo prior to 1.9.17p1 that stems from allowing listed users to execute commands on unintended machines...
sudo security update
1.9.5p2-10.1 RHEL 9.6.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100016...
CVE-2025-32462
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...