Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade sudo | Aug 8, 2025 | Jun 30, 2025 |
| Amazon_linux_2023 | — | Upgrade sudo-python-pluginUpgrade sudoUpgrade sudo-develUpgrade sudo-python-plugin-debuginfoUpgrade sudo-logsrvdUpgrade sudo-logsrvd-debuginfoUpgrade sudo-debugsourceUpgrade sudo-debuginfo | Jul 11, 2025 | Jun 30, 2025 |
| Debian | — | Upgrade sudo | Jul 23, 2026 | Jul 23, 2026 |
| Freebsd | — | Upgrade sudo-sssdUpgrade sudo | Jul 2, 2025 | Jul 1, 2025 |
| Gentoo Linux | — | Upgrade app-admin/sudo. | Jul 2, 2025 | Jun 30, 2025 |
| Oracle_linux | — | Upgrade sudoUpgrade sudo-python-plugin | Jul 24, 2025 | Jun 30, 2025 |
| Redhat_linux | — | Upgrade sudoUpgrade sudo-python-plugin-debuginfoUpgrade sudo-debugsourceUpgrade sudo-debuginfoUpgrade sudo-python-plugin | Jan 27, 2026 | Jun 30, 2025 |
| Rocky_linux | — | Upgrade sudo-python-pluginUpgrade sudo-python-plugin-debuginfoUpgrade sudo-debuginfoUpgrade sudo-debugsourceUpgrade sudo | Feb 11, 2026 | Oct 3, 2025 |
| Suse | — | Upgrade sudoUpgrade sudo-policy-wheel-auth-selfUpgrade system-group-sudoUpgrade sudo-testUpgrade sudo-policy-sudo-auth-selfUpgrade sudo-plugin-pythonUpgrade sudo-devel | Oct 23, 2025 | Jun 30, 2025 |
| Ubuntu | — | Upgrade sudo-ldapUpgrade sudo | Jul 1, 2025 | Jun 30, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jun 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub