CVE-2025-32463
100Vexday Risk Score
Corrija agora. Ela está sob exploração confirmada pelo CISA e tem exploit funcional público.
ssvc Actcvss 9.3epss 56%
da publicação à arma0 dias
Publicada no NVD30 de jun.
1ª PoC6 de nov.
metasploit30 de jun.
CISA KEV+91d
probabilidade de exploração
56%top 1% das CVEs
exploração observada
simCISA + VulnCheck
131 exploit(s) público(s)
Ação exigida pela CISAprazo federal: 2025-10-20
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Pesquisado e redigido com IA a partir do advisory do fornecedor e de análises públicas, com as fontes acima. Confira sempre a versão corrigida no advisory oficial antes de agir.
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Sudo project · SudoPoCs públicas encontradas — 131
exploitdbwww.exploit-db.com/exploits/52352não verificadogithubgithub.com/pr0v3rbs/CVE-2025-32463_chwoot★ 526githubgithub.com/kh4sh3i/CVE-2025-32463★ 472githubgithub.com/MohamedKarrab/CVE-2025-32463★ 48githubgithub.com/K1tt3h/CVE-2025-32463-POC★ 29githubgithub.com/Nowafen/CVE-2025-32463★ 26githubgithub.com/1xPwn/CVE-2025-32463★ 26githubgithub.com/mirchr/CVE-2025-32463-sudo-chwoot★ 25githubgithub.com/zinzloun/CVE-2025-32463★ 14githubgithub.com/AdityaBhatt3010/Sudo-Privilege-Escalation-Linux-CVE-2025-32463-and-CVE-2025-32462★ 11githubgithub.com/IC3-512/linux-root-kit★ 10githubgithub.com/K3ysTr0K3R/CVE-2025-32463-EXPLOIT★ 9githubgithub.com/Maalfer/Sudo-CVE-2021-3156★ 8githubgithub.com/FreeDurok/CVE-2025-32463-PoC★ 5githubgithub.com/y4ney/CVE-2025-32463-lab★ 4githubgithub.com/SysMancer/CVE-2025-32463★ 4githubgithub.com/pevinkumar10/CVE-2025-32463★ 3githubgithub.com/Yuy0ung/CVE-2025-32463_chwoot★ 3githubgithub.com/KaiHT-Ladiant/CVE-2025-32463★ 2githubgithub.com/Mikivirus0/sudoinjection★ 2githubgithub.com/7r00t/cve-2025-32463-lab★ 2githubgithub.com/Chocapikk/CVE-2025-32463-lab★ 1githubgithub.com/san8383/CVE-2025-32463★ 1githubgithub.com/ashardev002/CVE-2025-32463_chwoot★ 1githubgithub.com/secvulnhub/CVE-2025-32463-EXPLOIT★ 1githubgithub.com/0p5cur/CVE-2025-32463-POC★ 1githubgithub.com/0xb0rn3/CVE-2025-32463-EXPLOIT★ 1githubgithub.com/krypton-0x00/CVE-2025-32463-Chwoot-POC★ 1githubgithub.com/aexdyhaxor/CVE-2025-32463★ 1githubgithub.com/4f-kira/CVE-2025-32463★ 1githubgithub.com/NewComrade12211/CVE-2025-32463★ 1githubgithub.com/dr4xp/sudo-chroot★ 1githubgithub.com/abrewer251/CVE-2025-32463_Sudo_PoC★ 1githubgithub.com/SpongeBob-369/cve-2025-32463★ 1githubgithub.com/SpycioKon/CVE-2025-32463★ 0githubgithub.com/Rajneeshkarya/CVE-2025-32463★ 0githubgithub.com/MGunturG/CVE-2025-32463★ 0githubgithub.com/aldoClau98/CVE-2025-32463★ 0githubgithub.com/painoob/CVE-2025-32463★ 0githubgithub.com/Floodnut/CVE-2025-32463★ 0githubgithub.com/hacieda/CVE-2025-32463★ 0githubgithub.com/0xzap/CVE-2025-32463★ 0githubgithub.com/ChetanKomal/sudo_exploit★ 0githubgithub.com/neko205-mx/CVE-2025-32463_Exploit★ 0githubgithub.com/zhaduchanhzz/CVE-2025-32463_POC★ 0githubgithub.com/robbert1978/CVE-2025-32463_POC★ 0githubgithub.com/0xAkarii/CVE-2025-32463★ 0githubgithub.com/CIA911/sudo_patch_CVE-2025-32463★ 0githubgithub.com/ill-deed/CVE-2025-32463_illdeed★ 0githubgithub.com/gmh5225/Blackash-CVE-2025-32463★ 0githubgithub.com/lowercasenumbers/CVE-2025-32463_sudo_chroot★ 0githubgithub.com/morgenm/sudo-chroot-CVE-2025-32463★ 0githubgithub.com/daryllundy/CVE-2025-32463★ 0githubgithub.com/blackcat4347/CVE-2025-32463_PoC★ 0githubgithub.com/D3ltaFormation/CVE-2025-32463-Sudo-Chroot-Escape★ 0githubgithub.com/AC8999/CVE-2025-32463★ 0githubgithub.com/Ghstxz/CVE-2025-32463★ 0githubgithub.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation★ 0githubgithub.com/justjoeyking/CVE-2025-32463★ 0githubgithub.com/Mr-Alperen/CVE-2025-32463★ 0githubgithub.com/vpr-labs/CVE-2025-32463★ 0githubgithub.com/danilo1992-sys/CVE-2025-32463★ 0githubgithub.com/0xBlackash/CVE-2025-32463★ 0githubgithub.com/Fomovet/cve-2025-32463★ 0githubgithub.com/0xdak/CVE-2025-32463_exploit★ 0vulncheckvulncheck.com/xdb/62552cb7fa36não verificadovulncheckvulncheck.com/xdb/dda0b92d0019não verificadovulncheckvulncheck.com/xdb/ed2b1a895e50não verificadovulncheckvulncheck.com/xdb/67ac870e0f4dnão verificadovulncheckvulncheck.com/xdb/fd84600a7255não verificadovulncheckvulncheck.com/xdb/78a973a1668anão verificadovulncheckvulncheck.com/xdb/95589e9f31d1não verificadovulncheckvulncheck.com/xdb/02d05f13d095não verificadovulncheckvulncheck.com/xdb/e953f903d31bnão verificadovulncheckvulncheck.com/xdb/96b47c6cdd12não verificadovulncheckvulncheck.com/xdb/14c7608f3fdbnão verificadovulncheckvulncheck.com/xdb/437adba08b90não verificadovulncheckvulncheck.com/xdb/1cd732c8e759não verificadovulncheckvulncheck.com/xdb/1ecc76a6b4bcnão verificadovulncheckvulncheck.com/xdb/4673ebe95cb3não verificadovulncheckvulncheck.com/xdb/c8d6994e44benão verificadovulncheckvulncheck.com/xdb/a7dbeba42211não verificadovulncheckvulncheck.com/xdb/fa76dd169bb5não verificadovulncheckvulncheck.com/xdb/29c43fb75117não verificadovulncheckvulncheck.com/xdb/17841a65adeenão verificadovulncheckvulncheck.com/xdb/5d32e204fb12não verificadovulncheckvulncheck.com/xdb/f37a187b8faenão verificadovulncheckvulncheck.com/xdb/af5d55c7957bnão verificadovulncheckvulncheck.com/xdb/c696f036db3enão verificadovulncheckvulncheck.com/xdb/cb77d28c8daenão verificadovulncheckvulncheck.com/xdb/5fc4339b10banão verificadovulncheckvulncheck.com/xdb/f3e93522dd76não verificadovulncheckvulncheck.com/xdb/b1fd67aea76enão verificadocve_referenceiototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/não verificadovulncheckvulncheck.com/xdb/097df1d765f0não verificadovulncheckvulncheck.com/xdb/b4af66a72a25não verificadovulncheckvulncheck.com/xdb/1df62d05b49fnão verificadovulncheckvulncheck.com/xdb/b4ad31dec728não verificadovulncheckvulncheck.com/xdb/74af33b5058fnão verificadovulncheckvulncheck.com/xdb/cf96a03eb8cdnão verificadovulncheckvulncheck.com/xdb/d8a32b30bbbanão verificadovulncheckvulncheck.com/xdb/1490fdbe5838não verificadovulncheckvulncheck.com/xdb/7d927bb7bab5não verificadovulncheckvulncheck.com/xdb/2941ec38a46cnão verificadovulncheckvulncheck.com/xdb/0c48dd8a2977não verificadovulncheckvulncheck.com/xdb/83ebd9a9710fnão verificadovulncheckvulncheck.com/xdb/6cbabce04c76não verificadovulncheckvulncheck.com/xdb/f7e2b51b4041não verificadovulncheckvulncheck.com/xdb/79122433d702não verificadovulncheckvulncheck.com/xdb/5a1dc1cd79ffnão verificadovulncheckvulncheck.com/xdb/09bef5fbf6c2não verificadovulncheckvulncheck.com/xdb/a3da95bfab8fnão verificadovulncheckvulncheck.com/xdb/9f8f4bf23a62não verificadovulncheckvulncheck.com/xdb/e663d6373dbfnão verificadovulncheckvulncheck.com/xdb/5838e8b810ddnão verificadovulncheckvulncheck.com/xdb/6e448e3f9b60não verificadovulncheckvulncheck.com/xdb/8703b408ae78não verificadovulncheckvulncheck.com/xdb/58d14e4bfd7enão verificadovulncheckvulncheck.com/xdb/c8b4183bd360não verificadovulncheckvulncheck.com/xdb/804a7d02252anão verificadovulncheckvulncheck.com/xdb/b3702b68ca21não verificadovulncheckvulncheck.com/xdb/4e2fe689b265não verificadovulncheckvulncheck.com/xdb/ae9702df152enão verificadovulncheckvulncheck.com/xdb/ef2787a35cbanão verificadovulncheckvulncheck.com/xdb/c3fe9336495cnão verificadovulncheckvulncheck.com/xdb/06360918975anão verificadovulncheckvulncheck.com/xdb/11df486a55b3não verificadovulncheckvulncheck.com/xdb/2584cbb26906não verificadovulncheckvulncheck.com/xdb/b194368b3380não verificadovulncheckvulncheck.com/xdb/d24305ea5e6fnão verificadovulncheckvulncheck.com/xdb/f1b0c7a3b108não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://access.redhat.com/security/cve/cve-2025-32463https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463https://explore.alas.aws.amazon.com/CVE-2025-32463.htmlhttps://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/https://security-tracker.debian.org/tracker/CVE-2025-32463https://ubuntu.com/security/notices/USN-7604-1https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32463https://www.openwall.com/lists/oss-security/2025/06/30/3https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroothttps://www.sudo.ws/releases/changelog/https://www.sudo.ws/security/advisories/