5599 matches found
Security update for sudo
This update for sudo fixes the following issues: CVE-2025-32462: Fixed a possible local privilege escalation via the --host option bsc1245274. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...
SUSE-SU-2025:02175-1 Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option bsc1245274...
Security update for sudo
This update for sudo fixes the following issues: CVE-2025-32462: Fixed a possible local privilege escalation via the --host option bsc1245274. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...
SUSE-SU-2025:02174-1 Security update for sudo
This update for sudo fixes the following issues: - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option bsc1245274...
[SECURITY] [DSA 5954-1] sudo security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5954-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 30, 2025 https://www.debian.org/security/faq -...
CVE-2025-32462
A privilege escalation vulnerability was found in Sudo. In certain configurations, unauthorized users can gain elevated system privileges via the Sudo host option -h or --host. When using the default sudo security policy plugin sudoers, the host option is intended to be used in conjunction with t...
CVE-2025-32463
A flaw was found in Sudo. This flaw allows a local attacker to escalate their privileges by tricking Sudo into loading an arbitrary shared library using the user-specified root directory via the -R --chroot option. An attacker can run arbitrary commands as root on systems that support...
Sudo 安全漏洞
Sudo is a program used on Unix-like systems that allows users to execute commands with special privileges in a secure manner. A security vulnerability exists in Sudo versions prior to 1.9.17p1, which stems from the fact that using /etc/nsswitch.conf in the user control directory may result in...
PT-2025-27465
Name of the Vulnerable Software and Affected Versions: Sudo versions 1.8.8 through 1.9.17 Description: Sudo, a program designed to provide limited super user privileges, contains a vulnerability due to incorrect handling of the host -h or --host option. This flaw allows a local user to potentiall...
CVE-2025-32463
CVE-2025-32463 affects the sudo utility prior to 1.9.17p1. The vulnerability arises when /etc/nsswitch.conf is sourced from a user-controlled directory via the --chroot option, enabling local users to obtain root access. Connected sources also describe related behavior where a sudoers entry that ...
DSA-5954-1 sudo - security update
Bulletin has no description...
CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option...
CVE-2025-32463: Inclusion of Functionality from Untrusted Control Sphere
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option...
PT-2025-27466
Name of the Vulnerable Software and Affected Versions Sudo versions prior to 1.9.17p1 Description Local users can obtain root access and execute arbitrary commands by exploiting a flaw in the Sudo utility. The issue occurs when the --chroot or -R option is used, allowing the application to use a...
CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option...
EUVD-2025-20867
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...
CVE-2025-32462: Incorrect Authorization
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...
CVE-2025-32462
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...
