Sudo chroot 1.9.17 · Local Privilege Escalation
Source Exploit-DB RSS Feed
Rated by Threat Radar
Data as of 23 Jul 2025, 01:53 UTC
What to do
AI-suggested
Organizations should first verify if they are running sudo version 1.9.17 and plan to upgrade to a later patched version as soon as it becomes available. In the absence of an official patch, immediate mitigation steps include restricting local user access to trusted personnel only, employing strict user account management, and monitoring for unusual sudo activity or privilege escalations. Implementing mandatory access controls (e.g., SELinux or AppArmor) can help contain the impact of a successful exploit. Additionally, organizations should audit and limit the use of chroot environments and consider disabling or restricting sudo chroot functionality if not required. Regularly reviewing system logs for suspicious behavior and employing endpoint detection and response (EDR) solutions can aid in early detection of exploitation attempts. Finally, applying the principle of least privilege and ensuring that users do not have unnecessary sudo rights reduces the risk surface.
Description
Sudo chroot 1.9.17 - Local Privilege Escalation
Indicators of compromise
Exploit source code
Exploit Title: Sudo chroot 1.9.17 - Local Privilege Escalation
Google Dork: not aplicable
Date: Mon, 30 Jun 2025
Exploit Author: Stratascale
Vendor Homepage:https://salsa.debian.org/sudo-team/sudo
Software Link:
Version: Sudo versions 1.9.14 to 1.9.17 inclusive
Tested on: Kali Rolling 2025-7-3
CVE : CVE-2025-32463
*Version running today in Kali:*
https://pkg.kali.org/news/640802/sudo-1916p2-2-imported-into-kali-rolling/
*Background*
An attacker can leverage sudo's -R (--chroot) option to run
…