Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sudo | Aug 8, 2025 | Jun 30, 2025 |
| Amazon_linux_2023 | — | Upgrade sudo-debugsourceUpgrade sudo-debuginfoUpgrade sudo-logsrvd-debuginfoUpgrade sudo-logsrvdUpgrade sudo-python-plugin-debuginfoUpgrade sudo-python-pluginUpgrade sudoUpgrade sudo-devel | Jul 11, 2025 | Jun 30, 2025 |
| Debian | — | Upgrade sudo | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade sudoUpgrade sudo-sssd | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Jul 2, 2025 | Jun 30, 2025 |
| Oracle_linux | — | Upgrade sudo-python-pluginUpgrade sudo | Jul 24, 2025 | Jun 30, 2025 |
| Redhat_linux | — | Upgrade sudoUpgrade sudo-debuginfoUpgrade sudo-python-plugin-debuginfoUpgrade sudo-debugsourceUpgrade sudo-python-plugin | Jan 27, 2026 | Jun 30, 2025 |
| Rocky_linux | — | Upgrade sudo-python-plugin-debuginfoUpgrade sudo-debugsourceUpgrade sudo-debuginfoUpgrade sudoUpgrade sudo-python-plugin | Feb 11, 2026 | Oct 3, 2025 |
| Suse | — | Upgrade sudo-develUpgrade sudo-plugin-pythonUpgrade sudo-policy-sudo-auth-selfUpgrade system-group-sudoUpgrade sudoUpgrade sudo-policy-wheel-auth-selfUpgrade sudo-test | Oct 23, 2025 | Jun 30, 2025 |
| Ubuntu | — | Upgrade sudo-ldapUpgrade sudo | Jul 1, 2025 | Jun 30, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub