CVEFinder.io

CVE-2025-32463

⛔ critical
🔍 Scan for this CVE
Summary

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

CVSS Score
9.3
Critical
EPSS Score
20.8
Exploit Probability
Published Date
2025-06-30
First Seen: 2026-01-05
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 88.7% of all 335,187 vulnerabilities in our database.

#38,019
Top 25% most severe
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Sep 27, 2025
🔍 Exploitation Status
Active
Exploits detected in the wild
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2025-11-05
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-829

đŸ“Ļ Affected Products 14

Vendor Product Status Affected Versions
debian debian_linux Affected
v11.0
debian debian_linux Affected
v12.0
debian debian_linux Affected
v13.0
redhat enterprise_linux Affected
v10.0
suse linux_enterprise_desktop Affected
v15
canonical ubuntu_linux Affected
v22.04
canonical ubuntu_linux Affected
v24.04
canonical ubuntu_linux Affected
v24.10
canonical ubuntu_linux Affected
v25.04
suse linux_enterprise_server_for_sap Affected
v12
opensuse leap Affected
v15.6
sudo_project sudo Affected
≥ 1.9.14 < 1.9.17
sudo_project sudo Affected
v1.9.17
suse linux_enterprise_real_time Affected
v15.0

🔗 References 17

https://access.redhat.com/security/cve/cve-2025-32463
Third Party Advisory
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463
Issue Tracking Third Party Advisory
https://explore.alas.aws.amazon.com/CVE-2025-32463.html
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2025...
Third Party Advisory
https://ubuntu.com/security/notices/USN-7604-1
Third Party Advisory
https://www.openwall.com/lists/oss-security/2025/06/...
Third Party Advisory
https://www.secpod.com/blog/sudo-lpe-vulnerabilities...
Exploit Third Party Advisory
https://www.stratascale.com/vulnerability-alert-CVE-...
Exploit Third Party Advisory
https://www.sudo.ws/releases/changelog/
Release Notes
https://www.sudo.ws/security/advisories/
Vendor Advisory
https://www.sudo.ws/security/advisories/chroot_bug/
Vendor Advisory
https://www.suse.com/security/cve/CVE-2025-32463.html
Third Party Advisory
https://www.suse.com/support/update/announcement/202...
Third Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-3246...
Third Party Advisory
https://www.vicarius.io/vsociety/posts/cve-2025-3246...
Mitigation Third Party Advisory
https://iototsecnews.jp/2025/07/01/linux-sudo-chroot...
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities...
US Government Resource

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-15041 ℹī¸ low 3.7 0.3 A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for co... 2026-07-08
CVE-2026-58384 ⚠ī¸ high 7.3 0.2 A flaw was found in GIMP's PSD parser. An integer overflow in read_RLE_channel() can cause an undersized heap allocation... 2026-07-07
CVE-2026-14940 đŸ”ļ medium 5.3 0.3 A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When normalizing a Distinguished Name (DN) ... 2026-07-07
CVE-2026-14969 đŸ”ļ medium 4.4 0.1 A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vecto... 2026-07-07
CVE-2026-58380 ⚠ī¸ high 7.3 0.2 A flaw was found in GIMP's PNM file format parser. When parsing a specially crafted PNM file, the pnmscanner_gettoken() ... 2026-07-06
CVE-2026-59089 đŸ”ļ medium 5.5 0.2 A flaw was found in GIMP. The PlayStation TIM loader, responsible for handling PlayStation image files, incorrectly calc... 2026-07-06
These CVEs affect the same products