Summary
USN-7604-1 fixed CVE-2025-32462 in sudo. This update provides the
corresponding fixes for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS,
Ubuntu 16.04 LTS, and Ubuntu 14.04 LTS.
Original advisory details:
Rich Mirch discovered that Sudo incorrectly handled the host option. In
environments where per-host rules are configured in the sudoers file, a
local attacker could use this issue to bypass the host restrictions.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | sudo | 1.8.9p5-1ubuntu1.5+esm8 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | sudo | 1.8.16-0ubuntu1.10+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | sudo | 1.8.21p2-3ubuntu1.6+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | sudo | 1.8.31-1ubuntu1.5+esm1 |
Vulnerabilities 1
-
Low 2.8CVE-2025-32462 Public exploit
Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, all…
References
-
report
https://ubuntu.com/security/CVE-2025-32462