Sudo 2

Organization

CVE-2025-32463: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 29, 2025

Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.

Vulnerabilities & Patching

CVE-2021-3156: Sudo Heap-Based Buffer Overflow Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 06, 2022

Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.

Vulnerabilities & Patching