CVE-2025-32462

Updated: 2025-08-20 03:17:21.229621

Description:

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 8.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

Oracle Linux 7 ELS sudo 1.8.23 8.8 HIGH Released CLSA-2025:1751893905 2025-07-08 04:29:11
RHEL 7 ELS sudo 1.8.23 8.8 HIGH Released CLSA-2025:1751895848 2025-07-08 00:19:17
Ubuntu 16.04 ELS sudo 1.8.16 8.8 HIGH Released CLSA-2025:1753799801 2025-07-30 01:50:44
Ubuntu 18.04 ELS sudo 1.8.21 8.8 HIGH Released CLSA-2025:1753799668 2025-07-30 01:50:46
Ubuntu 20.04 ELS sudo 1.8.31 8.8 HIGH Released CLSA-2025:1753799090 2025-07-30 01:50:43
Total: 15