CVE-2025-32463
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the…
CVSS 3.1Medium
9.3/ 10.0
Опубликовано
Обновлено
В атаках
Не зафиксировано
Публичный PoC
Отсутствует
Анализ подготовлен:CVE Futuretools Threat Intelligence
Верификация: MITRE CVE List · CISA KEV · NIST NVD
ОФИЦИАЛЬНЫЙ ПАТЧ НЕ ОПУБЛИКОВАН
Обновите Sudo до версии 1.9.17p1 или выше.
01 // ТЕХНИЧЕСКАЯ СУТЬ УЯЗВИМОСТИ
Локальный пользователь может повысить привилегии до root при вызове Sudo с параметром --chroot.
02 // АНАТОМИЯ АТАКИ И ДЕФЕКТ ЛОГИКИ
При использовании ключа --chroot утилита Sudo загружает файл /etc/nsswitch.conf из каталога, контролируемого непривилегированным пользователем. Проблема затрагивает версии Sudo до 1.9.17p1.
03 // СИСТЕМНЫЕ ПОСЛЕДСТВИЯ
Получение локальным пользователем доступа с правами суперпользователя (root).
04 // МАТРИЦА ЗАТРОНУТЫХ ПАКЕТОВ
Точные диапазоны версий не зафиксированы в источниках
05 // ПЕРВОИСТОЧНИКИ И БЮЛЛЕТЕНИ (89)
- www.sudo.wshttps://www.sudo.ws/security/advisories/
- www.sudo.wshttps://www.sudo.ws/releases/changelog/
- www.stratascale.comhttps://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot
- www.openwall.comhttps://www.openwall.com/lists/oss-security/2025/06/30/3
- access.redhat.comhttps://access.redhat.com/security/cve/cve-2025-32463
- ubuntu.comhttps://ubuntu.com/security/notices/USN-7604-1
- security-tracker.debian.orghttps://security-tracker.debian.org/tracker/CVE-2025-32463
- explore.alas.aws.amazon.comhttps://explore.alas.aws.amazon.com/CVE-2025-32463.html
- bugs.gentoo.orghttps://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463
- www.suse.comhttps://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/
- www.suse.comhttps://www.suse.com/security/cve/CVE-2025-32463.html
- www.secpod.comhttps://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/
- www.sudo.wshttps://www.sudo.ws/security/advisories/chroot_bug/
- www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2025-32463-detect-sudo-vulnerability
- www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2025-32463-mitigate-sudo-vulnerability
- iototsecnews.jphttps://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32463
- www.exploit-db.comhttps://www.exploit-db.com/exploits/52352
- github.comhttps://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/sudo_chroot_cve_2025_32463.rb
- github.comhttps://github.com/0p5cur/CVE-2025-32463-POC
- github.comhttps://github.com/0x3c4dfa1/CVE-2025-32463
- github.comhttps://github.com/0xAkarii/CVE-2025-32463
- github.comhttps://github.com/0xBlackash/CVE-2025-32463
- github.comhttps://github.com/0xdak/CVE-2025-32463_exploit
- github.comhttps://github.com/12bijaya/CVE-2025-32463
- github.comhttps://github.com/1xPwn/CVE-2025-32463
- github.comhttps://github.com/4f-kira/CVE-2025-32463
- github.comhttps://github.com/7r00t/cve-2025-32463-lab
- github.comhttps://github.com/AC8999/CVE-2025-32463
- github.comhttps://github.com/AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462
- github.comhttps://github.com/CIA911/sudo_patch_CVE-2025-32463
- github.comhttps://github.com/ChetanKomal/sudo_exploit
- github.comhttps://github.com/Chocapikk/CVE-2025-32463-lab
- github.comhttps://github.com/D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape
- github.comhttps://github.com/EthanEvans92/CVE-2025-32463
- github.comhttps://github.com/Fomovet/cve-2025-32463
- github.comhttps://github.com/FreeDurok/CVE-2025-32463-PoC
- github.comhttps://github.com/IC3-512/linux-root-kit
- github.comhttps://github.com/K1tt3h/CVE-2025-32463-POC
- github.comhttps://github.com/KaiHT-Ladiant/CVE-2025-32463
- github.comhttps://github.com/MGunturG/CVE-2025-32463
- github.comhttps://github.com/Maalfer/Sudo-CVE-2021-3156
- github.comhttps://github.com/Mikivirus0/sudoinjection
- github.comhttps://github.com/MohamedKarrab/CVE-2025-32463
- github.comhttps://github.com/Mr-Alperen/CVE-2025-32463
- github.comhttps://github.com/NewComrade12211/CVE-2025-32463
- github.comhttps://github.com/Rajneeshkarya/CVE-2025-32463
- github.comhttps://github.com/SpongeBob-369/cve-2025-32463
- github.comhttps://github.com/SpycioKon/CVE-2025-32463
- github.comhttps://github.com/SysMancer/CVE-2025-32463
- github.comhttps://github.com/Yuy0ung/CVE-2025-32463_chwoot
- github.comhttps://github.com/abrewer251/CVE-2025-32463_Sudo_PoC
- github.comhttps://github.com/aldoClau98/CVE-2025-32463
- github.comhttps://github.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation
- github.comhttps://github.com/ashardev002/CVE-2025-32463_chwoot
- github.comhttps://github.com/blackcat4347/CVE-2025-32463_PoC
- github.comhttps://github.com/cybertechajju/CVE-2025-32463
- github.comhttps://github.com/danilo1992-sys/CVE-2025-32463
- github.comhttps://github.com/daryllundy/CVE-2025-32463
- github.comhttps://github.com/dr4x-c0d3r/sudo-chroot
- github.comhttps://github.com/dr4xp/sudo-chroot
- github.comhttps://github.com/gmh5225/Blackash-CVE-2025-32463
- github.comhttps://github.com/ill-deed/CVE-2025-32463_illdeed
- github.comhttps://github.com/jigrit/CVE-2025-32463
- github.comhttps://github.com/justjoeyking/CVE-2025-32463
- github.comhttps://github.com/kh4sh3i/CVE-2025-32463
- github.comhttps://github.com/khoazero123/CVE-2025-32463
- github.comhttps://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC
- github.comhttps://github.com/lowercasenumbers/CVE-2025-32463_sudo_chroot
- github.comhttps://github.com/mirchr/CVE-2025-32463-sudo-chwoot
- github.comhttps://github.com/morgenm/sudo-chroot-CVE-2025-32463
- github.comhttps://github.com/muhammedkayag/CVE-2025-32463
- github.comhttps://github.com/neko205-mx/CVE-2025-32463_Exploit
- github.comhttps://github.com/onniio/CVE-2025-32463
- github.comhttps://github.com/painoob/CVE-2025-32463
- github.comhttps://github.com/pevinkumar10/CVE-2025-32463
- github.comhttps://github.com/pr0v3rbs/CVE-2025-32463_chwoot
- github.comhttps://github.com/r3dBust3r/CVE-2025-32463
- github.comhttps://github.com/ricardomaia/CVE-2025-32463
- github.comhttps://github.com/robbert1978/CVE-2025-32463_POC
- github.comhttps://github.com/robbin0919/CVE-2025-32463
- github.comhttps://github.com/roock3t/CVE-2025-32463
- github.comhttps://github.com/san8383/CVE-2025-32463
- github.comhttps://github.com/secvulnhub/CVE-2025-32463-EXPLOIT
- github.comhttps://github.com/shazed-x/CVE-2025-32463
- github.comhttps://github.com/vpr-labs/CVE-2025-32463
- github.comhttps://github.com/y4ney/CVE-2025-32463-lab
- github.comhttps://github.com/zhaduchanhzz/CVE-2025-32463_POC
- github.comhttps://github.com/zinzloun/CVE-2025-32463
06 // ЦИТИРОВАНИЕ ДАННЫХ И ИСТОЧНИК
Для включения аналитической карточки в отчёты по безопасности, матрицы рисков или исследовательские публикации используйте стандартизированный формат цитирования:
Библиографическая ссылка (Plain text)
CVE Futuretools (2026). Анализ уязвимости CVE-2025-32463: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the…. URL: https://cve.futuretools.ru/cve/CVE-2025-32463
BibTeX формат (LaTeX)
@misc{cve_futuretools_cve_2025_32463,
title = {{CVE-2025-32463: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the…}},
author = {{CVE Futuretools}},
year = {2026},
howpublished = {\url{https://cve.futuretools.ru/cve/CVE-2025-32463}},
note = {Оперативный инженерный анализ киберугроз}
}