The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9978 advisory.

    [1.9.5p2-10.1]     RHEL 9.6.0.Z ERRATUM
    - CVE-2025-32462 sudo: LPE via host option     Resolves: RHEL-100016

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0106 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-32462:
    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:10707 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: LPE via host option (CVE-2025-32462)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-29c6186ffb advisory.

    Rebase to sudo 1.9.17p1

    - sudo-1_9_16p2 is available.
      Resolves: rhbz#2309626
    - sudo: LPE via host option.
      Resolves: CVE-2025-32462
    - Properly apply system buildflags.
    - Use new build macros, drop unneeded %defattr.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:10779 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: LPE via host option (CVE-2025-32462)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:10836 advisory.

    The sudo packages contain the sudo utility which allows system administrators to provide certain users     with the permission to execute privileged commands, which are used for system management purposes, without     having to log in as root.

    Security Fix(es):

    * sudo: LPE via host option (CVE-2025-32462)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to AHV-10.0.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.3 advisory.

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17,     iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14.
    Processing web content may disclose sensitive information. (CVE-2023-40403)

  - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines. (CVE-2025-32462)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

  - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata. You are affected by this vulnerability if using the     tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the     filter= parameter with a value of data or tar. See the tarfile extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that     for Python 3.14 or later the default value of filter= changed from no filtering to `data, so if you     are relying on this new default behavior then your usage is also affected. Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links. (CVE-2025-4138, CVE-2025-4330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines.(CVE-2025-32462)

Tenable has extracted the preceding description block directly from the EulerOS sudo security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the sudo package has been released.

The remote host is affected by the vulnerability described in GLSA-202507-01 (sudo: Privilege escalation)

    Multiple vulnerabilities have been discovered in sudo. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
241068	Oracle Linux 9 : sudo (ELSA-2025-9978)	Nessus	Oracle Linux Local Security Checks	7/1/2025	7/4/2025	low
241393	Alibaba Cloud Linux 3 : 0106: sudo (ALINUX3-SA-2025:0106)	Nessus	Alibaba Cloud Linux Local Security Checks	7/7/2025	7/7/2025	low
241661	RHEL 9 : sudo (RHSA-2025:10707)	Nessus	Red Hat Local Security Checks	7/9/2025	7/9/2025	low
241696	Fedora 41 : sudo (2025-29c6186ffb)	Nessus	Fedora Local Security Checks	7/10/2025	7/10/2025	low
241702	RHEL 9 : sudo (RHSA-2025:10779)	Nessus	Red Hat Local Security Checks	7/10/2025	7/10/2025	low
242058	RHEL 8 : sudo (RHSA-2025:10836)	Nessus	Red Hat Local Security Checks	7/14/2025	7/15/2025	low
258029	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.3)	Nessus	Misc.	8/27/2025	8/27/2025	critical
261835	EulerOS 2.0 SP12 : sudo (EulerOS-SA-2025-2029)	Nessus	Huawei Local Security Checks	9/10/2025	9/10/2025	high
241062	Photon OS 4.0: Sudo PHSA-2025-4.0-0824	Nessus	PhotonOS Local Security Checks	7/1/2025	9/30/2025	high
241076	GLSA-202507-01 : sudo: Privilege escalation	Nessus	Gentoo Local Security Checks	7/1/2025	9/30/2025	high

Detections

Analytics

Plugins Search

low

low

low

low

low

low

critical

high

high

high