Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

A local privilege escalation vulnerability in Sudo via chroot option was recently disclosed by a security researcher.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11537 advisory.

    - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11537 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: LPE via host option (CVE-2025-32462)

    * sudo: LPE via chroot option (CVE-2025-32463)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of sudo installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32463 advisory.

  - Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-     controlled directory is used with the --chroot option. (CVE-2025-32463)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of sudo installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32463 advisory.

  - Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-     controlled directory is used with the --chroot option. (CVE-2025-32463)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1070 advisory.

    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines. (CVE-2025-32462)

    Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-     controlled directory is used with the --chroot option. (CVE-2025-32463)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24f4b495-56a1-11f0-9621-93abbef07693 advisory.

    Todd C. Miller reports, crediting Rich Mirch from Stratascale Cyber Research Unit (CRU):
    Sudo 1.9.17p1:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202507-01 (sudo: Privilege escalation)

    Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7604-1 advisory.

    Rich Mirch discovered that Sudo incorrectly handled the host option. In environments where per-host rules     are configured in the sudoers file, a local attacker could use this issue to bypass the host restrictions.
    (CVE-2025-32462)

    Rich Mirch discovered that Sudo incorrectly handled the chroot option. In environments where the sudoers     file is configured to allow the chroot option, a local attacker could use this issue to run arbitrary     commands as root. This issue only applied to Ubuntu 24.04 LTS, Ubuntu 24.10, and Ubuntu 25.04.
    (CVE-2025-32463)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the sudo package has been released.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02177-1 advisory.

    - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).
    - CVE-2025-32463: Fixed a possible local privilege Escalation via chroot option (bsc#1245275).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of sudo installed on the remote host is prior to 1.9.17p1. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-181-01 advisory.

    New sudo packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the sudo security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
242608	Oracle Linux 10 : sudo (ELSA-2025-11537)	Nessus	Oracle Linux Local Security Checks	high
242571	RHEL 10 : sudo (RHSA-2025:11537)	Nessus	Red Hat Local Security Checks	high
241898	CBL Mariner 2.0 Security Update: sudo (CVE-2025-32463)	Nessus	MarinerOS Local Security Checks	critical
241874	Azure Linux 3.0 Security Update: sudo (CVE-2025-32463)	Nessus	Azure Linux Local Security Checks	critical
241782	Amazon Linux 2023 : sudo, sudo-devel, sudo-logsrvd (ALAS2023-2025-1070)	Nessus	Amazon Linux Local Security Checks	critical
241125	FreeBSD : sudo -- privilege escalation vulnerability through host and chroot options (24f4b495-56a1-11f0-9621-93abbef07693)	Nessus	FreeBSD Local Security Checks	critical
241076	GLSA-202507-01 : sudo: Privilege escalation	Nessus	Gentoo Local Security Checks	critical
241066	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Sudo vulnerabilities (USN-7604-1)	Nessus	Ubuntu Local Security Checks	critical
241062	Photon OS 4.0: Sudo PHSA-2025-4.0-0824	Nessus	PhotonOS Local Security Checks	critical
241057	Photon OS 5.0: Sudo PHSA-2025-5.0-0544	Nessus	PhotonOS Local Security Checks	critical
241038	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sudo (SUSE-SU-2025:02177-1)	Nessus	SuSE Local Security Checks	critical
240990	Slackware Linux 15.0 / current sudo Multiple Vulnerabilities (SSA:2025-181-01)	Nessus	Slackware Local Security Checks	critical

Detections

Analytics

CVE-2025-32463

high

Tenable Plugins

high

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical