CVE-2025-32462-

CVE-2025-32462 – Sudo主机名绕过权限提升 目录 1. 概述 2. 漏洞详情 3. 影响 4. 实验环境 5. 验证受影响版本 6. 用户与sudoers配置 7. 利用演练 8. 概念证明总结 9. 为什么Ubuntu不受影响 10. 缓解措施 11. MITRE ATT&CK映射 12. 参考 13. 免责声明 概述 CVE-2025-32462 是一个 sudo 中的本地权限提升漏洞 ，允许低权限用户通过滥用主机名受限的sudo规则 ，以 root 身份执行命令。问题在于 sudo 在授权检查中历史上对 -h（主机）选项的处理方式。...

DEBIAN-CVE-2025-32462

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...