CVE-2025-32462-

CVE-2025-32462 – Bypass de Hostname en Sudo para Escalada de Privilegios Tabla de Contenidos 1. Resumen 2. Detalles de la Vulnerabilidad 3. Impacto 4. Entorno de Laboratorio 5. Verificación de la Versión Vulnerable 6. Configuración de Usuario y sudoers 7. Recorrido de Explotación 8. Resumen de la...

DEBIAN-CVE-2025-32462

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...