Critical #Sudo Vulnerabilities Let Local Users Gain Root Access on #Linux, Impacting Major Distros
https://thehackernews.com/2025/07/critical-sudo-vulnerabilities-let-local.html
#FOSS #cybersecurity
You must log in or # to comment.
The major one affects
sudoversions 1.9.14 - 1.9.17Note: The legacy versions of Sudo (currently <= 1.8.32) are not vulnerable because the chroot feature does not exist.
The minor one has been a 12-year bug.
@thenewoil@mastodon.thenewoil.org
CVE-2025-32463 (CVSS score: 9.3) - Sudo before 1.9.17p1 allows local users to obtain root access because “/etc/nsswitch.conf” from a user-controlled directory is used with the --chroot optionThis is a really lame CVE. Yikes.
