The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02179-1 advisory.

    - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of sudo installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32462 advisory.

  - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines. (CVE-2025-32462)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:10871 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: LPE via host option (CVE-2025-32462)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-10871 advisory.

    [1.8.23-10.0.1.3]
    - CVE-2025-32462 sudo: LPE via host option [Orabug: 38187299]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.3.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.0.5 advisory.

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines. (CVE-2025-32462)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

  - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata. You are affected by this vulnerability if using the     tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the     filter= parameter with a value of data or tar. See the tarfile extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that     for Python 3.14 or later the default value of filter= changed from no filtering to `data, so if you     are relying on this new default behavior then your usage is also affected. Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links. (CVE-2025-4138, CVE-2025-4330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

Tenable has extracted the preceding description block directly from the EulerOS sudo security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-192801 advisory.

    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02177-1 advisory.

    - CVE-2025-32462: Fixed a possible local privilege escalation via the --host option (bsc#1245274).
    - CVE-2025-32463: Fixed a possible local privilege Escalation via chroot option (bsc#1245275).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7604-1 advisory.

    Rich Mirch discovered that Sudo incorrectly handled the host option. In environments where per-host rules     are configured in the sudoers file, a local attacker could use this issue to bypass the host restrictions.
    (CVE-2025-32462)

    Rich Mirch discovered that Sudo incorrectly handled the chroot option. In environments where the sudoers     file is configured to allow the chroot option, a local attacker could use this issue to run arbitrary     commands as root. This issue only applied to Ubuntu 24.04 LTS, Ubuntu 24.10, and Ubuntu 25.04.
    (CVE-2025-32463)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:11537 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: LPE via host option (CVE-2025-32462)

    * sudo: LPE via chroot option (CVE-2025-32463)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
241046	SUSE SLES15 Security Update : sudo (SUSE-SU-2025:02179-1)	Nessus	SuSE Local Security Checks	7/1/2025	7/4/2025	low
241935	Azure Linux 3.0 Security Update: sudo (CVE-2025-32462)	Nessus	Azure Linux Local Security Checks	7/11/2025	9/15/2025	high
242065	RHEL 7 : sudo (RHSA-2025:10871)	Nessus	Red Hat Local Security Checks	7/14/2025	7/14/2025	low
242646	Oracle Linux 7 : sudo (ELSA-2025-10871)	Nessus	Oracle Linux Local Security Checks	7/23/2025	9/11/2025	high
258038	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.0.5)	Nessus	Misc.	8/27/2025	8/27/2025	critical
264409	EulerOS 2.0 SP9 : sudo (EulerOS-SA-2025-2121)	Nessus	Huawei Local Security Checks	9/10/2025	9/10/2025	high
267295	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: sudo (UTSA-2025-192801)	Nessus	Unity Linux Local Security Checks	10/7/2025	10/10/2025	high
271302	EulerOS 2.0 SP13 : sudo (EulerOS-SA-2025-2279)	Nessus	Huawei Local Security Checks	10/24/2025	10/24/2025	high
241038	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : sudo (SUSE-SU-2025:02177-1)	Nessus	SuSE Local Security Checks	7/1/2025	9/30/2025	high
241066	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Sudo vulnerabilities (USN-7604-1)	Nessus	Ubuntu Local Security Checks	7/1/2025	9/30/2025	high
242571	RHEL 10 : sudo (RHSA-2025:11537)	Nessus	Red Hat Local Security Checks	7/22/2025	10/9/2025	high

Detections

Analytics

Plugins Search

low

high

low

high

critical

high

high

high

high

high

high