CVE-2025-32463
Privilege Escalation in Sudo via Malicious nsswitch.conf with --chroot

Publication date: 2025-06-30

Last updated on: 2025-07-01

Assigner: [email protected]

Description
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Affected Vendors & Products
Vendor Product Version
sudo sudo *
sudo sudo *
sudo sudo *
sudo sudo *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-829 Inclusion of Functionality from Untrusted Control Sphere
AI Powered Q&A
Can you explain this vulnerability to me?


How can this vulnerability impact me? :


How can this vulnerability be detected on my network or system? Can you suggest some commands?


What immediate steps should I take to mitigate this vulnerability?


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
Meta Information
CVE Publication Date:
2025-06-30
CVE Last Modified Date:
2025-07-01
Report Generation Date:
2025-07-03
AI Powered Q&A Generation:
2025-06-30
EPSS Last Evaluated Date:
2025-07-02
NVD Report Link: