Vulnerabilities in the sudo utility allow obtaining root privileges in the system.
A vulnerability (CVE-2025-32463) has been discovered in the sudo package, which is used for executing commands on behalf of other users. This vulnerability allows any unprivileged user to execute code with root privileges, even if the user is not mentioned in the sudoers configuration. Affected distributions are those using the configuration file /etc/nsswitch.conf; for example, the exploit of this vulnerability has been demonstrated in Ubuntu 24.04 and Fedora 41. The vulnerability manifests in the configuration as […]
