CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
- Sudo Project Sudo
- < 1.9.17
- Fix
- Available
- CVSS 3.1
- 9.3 CRITICAL
- EPSS
- 54.9% (99th percentile)
- Weakness
- CWE-829
- NVD status
- Analyzed
- Published
- 2025-06-30
CVE-2025-32463 at NVD
70 known exploits for CVE-2025-32463
Proof-of-concept code and exploit modules indexed by Sploitus
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
📄 sudo 1.9.17 chroot Privilege Escalation
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
📄 sudo 1.9.17 Local Privilege Escalation
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
📄 Sudo Chroot 1.9.17 Privilege Escalation
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Incorrect Authorization in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Incorrect Authorization in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
📄 Sudo chroot 1.9.17 Privilege Escalation
Sudo chroot 1.9.17 - Local Privilege Escalation
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Incorrect Authorization in Sudo_Project Sudo
Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo