BSD Portssudo -- privilege escalation vulnerability through host and chroot options
· CVE-2025-32462, CVE-2025-32463 · VuXML entry
Todd C. Miller reports, crediting Rich Mirch from Stratascale Cyber Research Unit (CRU): Sudo 1.9.17p1: Fixed CVE-2025-32462. Sudo's -h (--host) option could be specified when running a command or editing a file. This could enable a local privilege escalation attack if the sudoers file allows the user to run commands on a different host. For more information, see Local Privilege Escalation via host option. Fixed …
Affected versions
- sudo < 1.9.17p1
- sudo-sssd < 1.9.17p1
By system
0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | security/sudo | 1.9.17p1 | fixed | |
| OpenBSD | security/sudo | 1.9.17.2p2 | in range, by version | |
| NetBSD | security/sudo | 1.9.17p1 | not listed | |
| MidnightBSD | security/sudo | 1.9.17p2 | out of range, by version | |
| FreeBSD | security/sudo | 1.9.17p2_2 | fixed |