https://seclists.org/oss-sec/2025/q2/288: CVE-2025-32463: sudo local privilege escalation via chroot option
Published Jun 30, 2025
·Updated
Affected Software
1 affected component
Sudo Sudo>=1.9.14<=1.9.17
Frequently Asked Questions
1
What is the severity of CVE-2025-32463?
CVE-2025-32463 is classified as a critical vulnerability due to its potential for local privilege escalation.
2
How does CVE-2025-32463 exploit sudo's chroot option?
CVE-2025-32463 allows attackers to misuse the -R (--chroot) option in sudo to execute arbitrary commands as root.
3
Which versions of sudo are affected by CVE-2025-32463?
Sudo versions 1.9.14 to 1.9.17 inclusive are affected by CVE-2025-32463.
4
How do I fix CVE-2025-32463?
To fix CVE-2025-32463, upgrade to a version of sudo that is not vulnerable, such as versions after 1.9.17.
5
What are the potential impacts of CVE-2025-32463 on system security?
The impact of CVE-2025-32463 can allow an attacker to gain root privileges, compromising system integrity and security.