CVE-2025-32463 PoC — Sudo 安全漏洞

Source

https://github.com/dr4x-c0d3r/sudo-chroot

Associated Vulnerability

Title:Sudo 安全漏洞 (CVE-2025-32463)
Description:Sudo是一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。 Sudo 1.9.17p1之前版本存在安全漏洞，该漏洞源于使用用户控制目录中的/etc/nsswitch.conf可能导致获取root访问权限。

Description

Sudo Vulnerability Local PrivEsc (CVE-2025-32463) POC with Python

Readme

<h1>Description:</h1>
<h3>Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.</h3>
<h2>Local Privilege Escalation by sudo-chroot (-R)</h2>

<p align="center">
  <img src='https://github.com/user-attachments/assets/666442e5-7ae5-485d-9dff-2667aa8efb7e'/>
</p>

File Snapshot


 [4.0K]  /data/pocs/8aa0da2be6808458ef1387b3cf9afd5ae1deabdd
├── [ 913]  exploit.py
└── [ 363]  README.md

1 directory, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!