Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Sudo Policy Bypass via execveat System Call

Sudo versions through 1.9.17p2 are vulnerable to a privilege escalation flaw where the ptrace-based intercept mode fails to filter execveat system calls, allowing unauthorized command execution.

Sudo
1t 1c
high advisory

Sudo Chroot Privilege Escalation via NSSwitch File Manipulation (CVE-2025-32463)

Attackers can exploit CVE-2025-32463, a privilege escalation vulnerability in `sudo` when used with `chroot`, by creating a malicious `nsswitch.conf` file and associated Name Service Switch (NSS) modules within a controlled chroot environment to trick `sudo` into loading attacker-controlled code, leading to root privileges on Linux systems.

sudo +1 privilege-escalation linux cve vulnerability nsswitch
1r 2t 1c