CVE-2025-32463

CVE-2025-32463 Повышение привилегий Sudo chroot Затрагивает версии Sudo с 1.9.14 по 1.9.17. CVE-2025-32463 был внедрен в Sudo v1.9.14 июнь 2023 вместе с обновлением кода обработки сопоставления команд при использовании функции chroot...

CVE-2021-3156

CVE-2021-3156 vérification de la vulnérabilité CVE-2021-3156 et script de correctif Description de CVE-2021-3156 : Sudo avant 1.9.5p2 présente un débordement de tampon basé sur le tas, permettant une escalade de privilèges vers root via "sudoedit -s" et un argument de ligne de commande se termina...

CVE-2021-3156

Exploit CVE-2021-3156 Exécution: $ git clone https://github.com/RodricBr/CVE-2021-3156 $ cd CVE-2021-3156/ $ chmod u+x programa.sh $ ./programa.sh One-liner: AA=$sudo --version | tr ':space:' ','| tr -d '.' | cut -d ',' -f3 | awk 'print $0'; "$AA" -lt 1828 && echo -e "Exploitável\nCVE-2021-3156";...

CVE-2025-34322_CVE-2025-34323_Nagios_Log_Server

CVE-2025-34322 et CVE-2025-34323 Nagios Log Server Preuves de concept pour les exploits CVE-2025-34322 et CVE-2025-34323 dans Nagios Log Server, ainsi qu'un script combiné pour obtenir un shell root. CVE-2025-34322 Après authentification, remplacez votre identifiant de session dans ces deux...

sudo-chroot-CVE-2025-32463

AVERTISSEMENT Ce code est fourni uniquement à des fins éducatives et de recherche. Ne l'utilisez pas sur des systèmes que vous ne possédez pas ou pour lesquels vous n'avez pas l'autorisation de tester. L'auteur n'est pas responsable de toute utilisation abusive, de tout dommage ou des conséquence...

CVE-2019-14287-demo

Conteneur de démonstration CVE-2019-14287 Ceci est un conteneur construit à des fins de démonstration qui contient une version de la commande sudo vulnérable à CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. Ce conteneur peut être exécuté avec : docker run -ti...

CVE-2025-32463-Sudo-Chroot-Escape

CVE-2025-32463-Sudo-Chroot-Escape Description Ce dépôt contient une preuve de concept PoC basée sur Python pour CVE-2025-32463, une vulnérabilité d'escalade de privilèges locaux dans les versions de sudo 1.9.14 à 1.9.17. Lorsqu'un utilisateur a des privilèges sudo pour exécuter une commande dans ...

sudo_patch_CVE-2025-32463

sudopatchCVE-2025-32463 Le guide de correction manuelle de Mr.CIA pour CVE-2025-32463 escalade de privilèges locale de Sudo testé sur Kali Linux et Ubuntu WSL. CVE-2025-32463 Guide de correctif Sudo 🛡️ Eish, CVE-2025-32463 est une méchante faille d'escalade de privilèges locale CVSS 9.3 dans Sudo...

CVE-2025-32463-EXPLOIT

CVE-2025-32463 - Sudo特権昇格 sudoにおける特権昇格の脆弱性が、Linux/Unix系システムに影響を与えます。この欠陥は、sudoが-R（--chroot）オプションと共に使用された際の不適切なパス検証 に起因し、攻撃者が悪意のあるNSSライブラリのロードを介してrootに昇格することを可能にします。 根本原因 sudoがchroot環境 （-Rオプション）内でコマンドを実行する際、エラー状態でのNSS Name Service Switch ライブラリの読み込み を誤って処理します。...

Exploit for CVE-2026-96512

abraxaslabs.tech · github.com/abraxas ·&...

Exploit for CVE-2026-96512

SudoTimeWarp — CVE-2026-96512 sudo: the caller's TZ decid...

SUSE CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

sudo: sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: sudo: sudo-1.9.17-16.p2.2.hum1 aarch64, x8664 sudo-devel-1.9.17-16.p2.2.hum1 aarch64, x8664 sudo-logsrvd-1.9.17-16.p2.2.hum1 aarch64, x8664 sudo-python-plugin-1.9.17-16.p2.2.hum1 aarch64, x8664...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

sudo: Sudo: Policy bypass allows unauthorized program execution via execveat

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...

RHEL 10 : sudo (RHSA-2026:71354)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:71354 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

DEBIAN-CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

AZL-104940 CVE-2026-96512 affecting package sudo 1.9.17-3

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...

CVE-2026-96512

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...