CVE-2025-32463
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.
ssvc Actcvss 9.3epss 56%
de la publicación al arma0 días
Publicada en NVD30 jun
1ª PoC6 nov
metasploit30 jun
CISA KEV+91d
probabilidad de explotación
56%top 1% de las CVE
explotación observada
síCISA + VulnCheck
131 exploit(s) público(s)
Acción exigida por CISAplazo federal: 2025-10-20
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Investigado y redactado con IA a partir del advisory del fabricante y análisis públicos, con las fuentes citadas. Verifica siempre la versión corregida en el advisory oficial antes de actuar.
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Sudo project · SudoPoCs públicas encontradas — 131
exploitdbwww.exploit-db.com/exploits/52352no verificadogithubgithub.com/pr0v3rbs/CVE-2025-32463_chwoot★ 526githubgithub.com/kh4sh3i/CVE-2025-32463★ 472githubgithub.com/MohamedKarrab/CVE-2025-32463★ 48githubgithub.com/K1tt3h/CVE-2025-32463-POC★ 29githubgithub.com/Nowafen/CVE-2025-32463★ 26githubgithub.com/1xPwn/CVE-2025-32463★ 26githubgithub.com/mirchr/CVE-2025-32463-sudo-chwoot★ 25githubgithub.com/zinzloun/CVE-2025-32463★ 14githubgithub.com/AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462★ 11githubgithub.com/IC3-512/linux-root-kit★ 10githubgithub.com/K3ysTr0K3R/CVE-2025-32463-EXPLOIT★ 9githubgithub.com/Maalfer/Sudo-CVE-2021-3156★ 8githubgithub.com/FreeDurok/CVE-2025-32463-PoC★ 5githubgithub.com/y4ney/CVE-2025-32463-lab★ 4githubgithub.com/SysMancer/CVE-2025-32463★ 4githubgithub.com/pevinkumar10/CVE-2025-32463★ 3githubgithub.com/Yuy0ung/CVE-2025-32463_chwoot★ 3githubgithub.com/KaiHT-Ladiant/CVE-2025-32463★ 2githubgithub.com/Mikivirus0/sudoinjection★ 2githubgithub.com/7r00t/cve-2025-32463-lab★ 2githubgithub.com/Chocapikk/CVE-2025-32463-lab★ 1githubgithub.com/san8383/CVE-2025-32463★ 1githubgithub.com/ashardev002/CVE-2025-32463_chwoot★ 1githubgithub.com/secvulnhub/CVE-2025-32463-EXPLOIT★ 1githubgithub.com/0p5cur/CVE-2025-32463-POC★ 1githubgithub.com/0xb0rn3/CVE-2025-32463-EXPLOIT★ 1githubgithub.com/krypton-0x00/CVE-2025-32463-Chwoot-POC★ 1githubgithub.com/aexdyhaxor/CVE-2025-32463★ 1githubgithub.com/4f-kira/CVE-2025-32463★ 1githubgithub.com/NewComrade12211/CVE-2025-32463★ 1githubgithub.com/dr4xp/sudo-chroot★ 1githubgithub.com/abrewer251/CVE-2025-32463_Sudo_PoC★ 1githubgithub.com/SpongeBob-369/cve-2025-32463★ 1githubgithub.com/SpycioKon/CVE-2025-32463★ 0githubgithub.com/Rajneeshkarya/CVE-2025-32463★ 0githubgithub.com/MGunturG/CVE-2025-32463★ 0githubgithub.com/aldoClau98/CVE-2025-32463★ 0githubgithub.com/painoob/CVE-2025-32463★ 0githubgithub.com/Floodnut/CVE-2025-32463★ 0githubgithub.com/hacieda/CVE-2025-32463★ 0githubgithub.com/0xzap/CVE-2025-32463★ 0githubgithub.com/ChetanKomal/sudo_exploit★ 0githubgithub.com/neko205-mx/CVE-2025-32463_Exploit★ 0githubgithub.com/zhaduchanhzz/CVE-2025-32463_POC★ 0githubgithub.com/robbert1978/CVE-2025-32463_POC★ 0githubgithub.com/0xAkarii/CVE-2025-32463★ 0githubgithub.com/CIA911/sudo_patch_CVE-2025-32463★ 0githubgithub.com/ill-deed/CVE-2025-32463_illdeed★ 0githubgithub.com/gmh5225/Blackash-CVE-2025-32463★ 0githubgithub.com/lowercasenumbers/CVE-2025-32463_sudo_chroot★ 0githubgithub.com/morgenm/sudo-chroot-CVE-2025-32463★ 0githubgithub.com/daryllundy/CVE-2025-32463★ 0githubgithub.com/blackcat4347/CVE-2025-32463_PoC★ 0githubgithub.com/D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape★ 0githubgithub.com/AC8999/CVE-2025-32463★ 0githubgithub.com/Ghstxz/CVE-2025-32463★ 0githubgithub.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation★ 0githubgithub.com/justjoeyking/CVE-2025-32463★ 0githubgithub.com/Mr-Alperen/CVE-2025-32463★ 0githubgithub.com/vpr-labs/CVE-2025-32463★ 0githubgithub.com/danilo1992-sys/CVE-2025-32463★ 0githubgithub.com/0xBlackash/CVE-2025-32463★ 0githubgithub.com/Fomovet/cve-2025-32463★ 0githubgithub.com/0xdak/CVE-2025-32463_exploit★ 0vulncheckvulncheck.com/xdb/62552cb7fa36no verificadovulncheckvulncheck.com/xdb/dda0b92d0019no verificadovulncheckvulncheck.com/xdb/ed2b1a895e50no verificadovulncheckvulncheck.com/xdb/67ac870e0f4dno verificadovulncheckvulncheck.com/xdb/fd84600a7255no verificadovulncheckvulncheck.com/xdb/78a973a1668ano verificadovulncheckvulncheck.com/xdb/95589e9f31d1no verificadovulncheckvulncheck.com/xdb/02d05f13d095no verificadovulncheckvulncheck.com/xdb/e953f903d31bno verificadovulncheckvulncheck.com/xdb/96b47c6cdd12no verificadovulncheckvulncheck.com/xdb/14c7608f3fdbno verificadovulncheckvulncheck.com/xdb/437adba08b90no verificadovulncheckvulncheck.com/xdb/1cd732c8e759no verificadovulncheckvulncheck.com/xdb/1ecc76a6b4bcno verificadovulncheckvulncheck.com/xdb/4673ebe95cb3no verificadovulncheckvulncheck.com/xdb/c8d6994e44beno verificadovulncheckvulncheck.com/xdb/a7dbeba42211no verificadovulncheckvulncheck.com/xdb/fa76dd169bb5no verificadovulncheckvulncheck.com/xdb/29c43fb75117no verificadovulncheckvulncheck.com/xdb/17841a65adeeno verificadovulncheckvulncheck.com/xdb/5d32e204fb12no verificadovulncheckvulncheck.com/xdb/f37a187b8faeno verificadovulncheckvulncheck.com/xdb/af5d55c7957bno verificadovulncheckvulncheck.com/xdb/c696f036db3eno verificadovulncheckvulncheck.com/xdb/cb77d28c8daeno verificadovulncheckvulncheck.com/xdb/5fc4339b10bano verificadovulncheckvulncheck.com/xdb/f3e93522dd76no verificadovulncheckvulncheck.com/xdb/b1fd67aea76eno verificadocve_referenceiototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/no verificadovulncheckvulncheck.com/xdb/097df1d765f0no verificadovulncheckvulncheck.com/xdb/b4af66a72a25no verificadovulncheckvulncheck.com/xdb/1df62d05b49fno verificadovulncheckvulncheck.com/xdb/b4ad31dec728no verificadovulncheckvulncheck.com/xdb/74af33b5058fno verificadovulncheckvulncheck.com/xdb/cf96a03eb8cdno verificadovulncheckvulncheck.com/xdb/d8a32b30bbbano verificadovulncheckvulncheck.com/xdb/1490fdbe5838no verificadovulncheckvulncheck.com/xdb/7d927bb7bab5no verificadovulncheckvulncheck.com/xdb/2941ec38a46cno verificadovulncheckvulncheck.com/xdb/0c48dd8a2977no verificadovulncheckvulncheck.com/xdb/83ebd9a9710fno verificadovulncheckvulncheck.com/xdb/6cbabce04c76no verificadovulncheckvulncheck.com/xdb/f7e2b51b4041no verificadovulncheckvulncheck.com/xdb/79122433d702no verificadovulncheckvulncheck.com/xdb/5a1dc1cd79ffno verificadovulncheckvulncheck.com/xdb/09bef5fbf6c2no verificadovulncheckvulncheck.com/xdb/a3da95bfab8fno verificadovulncheckvulncheck.com/xdb/9f8f4bf23a62no verificadovulncheckvulncheck.com/xdb/e663d6373dbfno verificadovulncheckvulncheck.com/xdb/5838e8b810ddno verificadovulncheckvulncheck.com/xdb/6e448e3f9b60no verificadovulncheckvulncheck.com/xdb/8703b408ae78no verificadovulncheckvulncheck.com/xdb/58d14e4bfd7eno verificadovulncheckvulncheck.com/xdb/c8b4183bd360no verificadovulncheckvulncheck.com/xdb/804a7d02252ano verificadovulncheckvulncheck.com/xdb/b3702b68ca21no verificadovulncheckvulncheck.com/xdb/4e2fe689b265no verificadovulncheckvulncheck.com/xdb/ae9702df152eno verificadovulncheckvulncheck.com/xdb/ef2787a35cbano verificadovulncheckvulncheck.com/xdb/c3fe9336495cno verificadovulncheckvulncheck.com/xdb/06360918975ano verificadovulncheckvulncheck.com/xdb/11df486a55b3no verificadovulncheckvulncheck.com/xdb/2584cbb26906no verificadovulncheckvulncheck.com/xdb/b194368b3380no verificadovulncheckvulncheck.com/xdb/d24305ea5e6fno verificadovulncheckvulncheck.com/xdb/f1b0c7a3b108no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://access.redhat.com/security/cve/cve-2025-32463https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463https://explore.alas.aws.amazon.com/CVE-2025-32463.htmlhttps://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/https://security-tracker.debian.org/tracker/CVE-2025-32463https://ubuntu.com/security/notices/USN-7604-1https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32463https://www.openwall.com/lists/oss-security/2025/06/30/3https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroothttps://www.sudo.ws/releases/changelog/https://www.sudo.ws/security/advisories/