DEBIAN-CVE-2025-32463 - debian/sudo
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CWE-829 / CVSS 9.3 (CRITICAL)
Evidence
- imported from OSV Debian, untriaged
History
- 2026-10-28: Awaiting approval - bulk import
- 2026-10-29: Awaiting triage - reclassified: OSV Debian bulk import, awaiting triage