Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sudo | Aug 8, 2025 | Jun 30, 2025 |
| Amazon_linux_2023 | — | Upgrade sudoUpgrade sudo-python-plugin-debuginfoUpgrade sudo-python-pluginUpgrade sudo-develUpgrade sudo-logsrvd-debuginfoUpgrade sudo-logsrvdUpgrade sudo-debugsourceUpgrade sudo-debuginfo | Jul 11, 2025 | Jun 30, 2025 |
| Debian | — | Upgrade sudo | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade sudo-sssdUpgrade sudo | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Jul 2, 2025 | Jun 30, 2025 |
| Oracle_linux | — | Upgrade sudo-python-pluginUpgrade sudo | Jul 24, 2025 | Jun 30, 2025 |
| Redhat_linux | — | Upgrade sudo-python-pluginUpgrade sudoUpgrade sudo-debuginfoUpgrade sudo-python-plugin-debuginfoUpgrade sudo-debugsource | Jan 27, 2026 | Jun 30, 2025 |
| Rocky_linux | — | Upgrade sudo-debuginfoUpgrade sudoUpgrade sudo-debugsourceUpgrade sudo-python-plugin-debuginfoUpgrade sudo-python-plugin | Feb 11, 2026 | Oct 3, 2025 |
| Suse | — | Upgrade sudo-policy-sudo-auth-selfUpgrade sudo-develUpgrade sudo-plugin-pythonUpgrade sudo-testUpgrade sudo-policy-wheel-auth-selfUpgrade system-group-sudoUpgrade sudo | Oct 23, 2025 | Jun 30, 2025 |
| Ubuntu | — | Upgrade sudoUpgrade sudo-ldap | Jul 1, 2025 | Jun 30, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub