PT-2025-27465 · Sudo+11 · Sudo+11
Rich Mirch
·
Published
2025-06-30
·
Updated
2025-12-10
·
CVE-2025-32462
CVSS v3.1
8.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Sudo versions 1.8.8 through 1.9.17
Description:
Sudo, a program designed to provide limited super user privileges, contains a vulnerability due to incorrect handling of the host (-h or --host) option. This flaw allows a local user to potentially escalate privileges by bypassing host restrictions when using the sudo command or sudoedit. The vulnerability stems from the host option not being restricted to listing privileges only, enabling execution of commands on unintended machines. This issue has existed for over 12 years.
Recommendations:
Upgrade to Sudo version 1.9.17p1 or later to address this vulnerability.
Exploit
Fix
LPE
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Red Os
Rocky Linux
Sudo
Suse
Ubuntu