CVE-2025-32462-

CVE-2025-32462 – Обход проверки имени хоста sudo для повышения привилегий Содержание 1. Обзор 2. Детали уязвимости 3. Воздействие 4. Лабораторная среда 5. Проверка уязвимой версии 6. Конфигурация пользователя и sudoers 7. Пошаговая эксплуатация 8. Итоги Proof of Concept 9. Почему Ubuntu не уязвим...

DEBIAN-CVE-2025-32462

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines...

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...