CVE catalog

CVE-2025-32462

Sudo vulnerabilities

[CVE catalog]

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Severity
High · CVSS 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
4.48% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixiesudo1.9.16p2-3FixedDistribution-reported fixed boundary[CVE-2025-32462]
Debiantrixiesudo1.9.16p2-3+deb13u2Fixed[CVE-2025-32462]
Debiansidsudo1.9.16p2-3FixedDistribution-reported fixed boundary[CVE-2025-32462]
Debiansidsudo1.9.17p2-9Fixed[CVE-2025-32462]
Debianforkysudo1.9.16p2-3FixedDistribution-reported fixed boundary[CVE-2025-32462]
Debianforkysudo1.9.17p2-9Fixed[CVE-2025-32462]
Debianbookworm-securitysudo1.9.13p3-1+deb12u2Fixed[CVE-2025-32462]
Debianbookwormsudo1.9.13p3-1+deb12u2FixedDistribution-reported fixed boundary[CVE-2025-32462]
Debianbookwormsudo1.9.13p3-1+deb12u4Fixed[CVE-2025-32462]

Showing 9 fix observations. All 61 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reportedlibnss-sudo1.9.15p5-3ubuntu5.24.04.1UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedsudo1.9.13p3-1+deb12u2UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedsudo1.9.15p5-3ubuntu5.24.04.1UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedsudo-ldap1.9.15p5-3ubuntu5.24.04.1UnknownSource applicability is not establishedProvider not reported
Debianbookwormsudo1.9.13p3-1+deb12u2FixedDistribution-reported fixed boundary[CVE-2025-32462]
Debianbookwormsudo1.9.13p3-1+deb12u4Fixed[CVE-2025-32462]
Debianbookworm-securitysudo1.9.13p3-1+deb12u2Fixed[CVE-2025-32462]
Debianforkysudo1.9.16p2-3FixedDistribution-reported fixed boundary[CVE-2025-32462]
Debianforkysudo1.9.17p2-9Fixed[CVE-2025-32462]
Debiansidsudo1.9.16p2-3FixedDistribution-reported fixed boundary[CVE-2025-32462]
Debiansidsudo1.9.17p2-9Fixed[CVE-2025-32462]
Debiantrixiesudo1.9.16p2-3FixedDistribution-reported fixed boundary[CVE-2025-32462]
Debiantrixiesudo1.9.16p2-3+deb13u2Fixed[CVE-2025-32462]
Opensuseleap 15.6sudo1.9.15p5-150600.3.9.1UnknownSource applicability is not established[SUSE-SU-2025:02177-1]
Opensusetumbleweedsudo1.9.17p1-1.1UnknownSource applicability is not established[OPENSUSE-SU-2025:15298-1]
Suseenterprise storage 7.1sudo1.9.5p2-150300.3.36.1UnknownSource applicability is not established[SUSE-SU-2025:02175-1]
Suselinux enterprise high performance computing 15 sp3-ltsssudo1.9.5p2-150300.3.36.1UnknownSource applicability is not established[SUSE-SU-2025:02175-1]
Suselinux enterprise high performance computing 15 sp4-espossudo1.9.9-150400.4.39.1UnknownSource applicability is not established[SUSE-SU-2025:02178-1]
Suselinux enterprise high performance computing 15 sp4-ltsssudo1.9.9-150400.4.39.1UnknownSource applicability is not established[SUSE-SU-2025:02178-1]
Suselinux enterprise high performance computing 15 sp5-espossudo1.9.12p1-150500.7.13.1UnknownSource applicability is not established[SUSE-SU-2025:02179-1]
Suselinux enterprise high performance computing 15 sp5-ltsssudo1.9.12p1-150500.7.13.1UnknownSource applicability is not established[SUSE-SU-2025:02179-1]
Suselinux enterprise micro 5.1sudo1.9.5p2-150300.3.36.1UnknownSource applicability is not established[SUSE-SU-2025:02175-1]
Suselinux enterprise micro 5.2sudo1.9.5p2-150300.3.36.1UnknownSource applicability is not established[SUSE-SU-2025:02175-1]
Suselinux enterprise micro 5.3sudo1.9.9-150400.4.39.1UnknownSource applicability is not established[SUSE-SU-2025:02178-1]
Suselinux enterprise micro 5.4sudo1.9.9-150400.4.39.1UnknownSource applicability is not established[SUSE-SU-2025:02178-1]
Suselinux enterprise micro 5.5sudo1.9.12p1-150500.7.13.1UnknownSource applicability is not established[SUSE-SU-2025:02179-1]
Suselinux enterprise module for basesystem 15 sp6sudo1.9.15p5-150600.3.9.1UnknownSource applicability is not established[SUSE-SU-2025:02177-1]
Suselinux enterprise module for basesystem 15 sp7sudo1.9.15p5-150600.3.9.1UnknownSource applicability is not established[SUSE-SU-2025:02177-1]
Suselinux enterprise server 12 sp5-ltsssudo1.8.27-4.54.1UnknownSource applicability is not established[SUSE-SU-2025:02174-1]
Suselinux enterprise server 15 sp3-ltsssudo1.9.5p2-150300.3.36.1UnknownSource applicability is not established[SUSE-SU-2025:02175-1]
Suselinux enterprise server 15 sp4-ltsssudo1.9.9-150400.4.39.1UnknownSource applicability is not established[SUSE-SU-2025:02178-1]
Suselinux enterprise server 15 sp5-ltsssudo1.9.12p1-150500.7.13.1UnknownSource applicability is not established[SUSE-SU-2025:02179-1]
Suselinux enterprise server for sap applications 15 sp3sudo1.9.5p2-150300.3.36.1UnknownSource applicability is not established[SUSE-SU-2025:02175-1]
Suselinux enterprise server for sap applications 15 sp4sudo1.9.9-150400.4.39.1UnknownSource applicability is not established[SUSE-SU-2025:02178-1]
Suselinux enterprise server for sap applications 15 sp5sudo1.9.12p1-150500.7.13.1UnknownSource applicability is not established[SUSE-SU-2025:02179-1]
Suselinux enterprise server ltss extended security 12 sp5sudo1.8.27-4.54.1UnknownSource applicability is not established[SUSE-SU-2025:02174-1]
Suselinux micro 6.0sudo1.9.15p5-2.1UnknownSource applicability is not established[SUSE-SU-2025:20489-1]
Suselinux micro 6.1sudo1.9.15p5-slfo.1.1_2.1UnknownSource applicability is not established[SUSE-SU-2025:20478-1]
Susemanager proxy 4.3sudo1.9.9-150400.4.39.1UnknownSource applicability is not established[SUSE-SU-2025:02178-1]
Susemanager server 4.3sudo1.9.9-150400.4.39.1UnknownSource applicability is not established[SUSE-SU-2025:02178-1]
Ubuntu22.04sudo1.9.5p2-3ubuntu2UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu22.04sudo1.9.9-1ubuntu2UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu22.04sudo1.9.9-1ubuntu2.1UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu22.04sudo1.9.9-1ubuntu2.2UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu22.04sudo1.9.9-1ubuntu2.3UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu22.04sudo1.9.9-1ubuntu2.4UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu22.04sudo1.9.9-1ubuntu2.5UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu24.04sudo1.9.14p2-1ubuntu1UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu24.04sudo1.9.15p5-3ubuntu1UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu24.04sudo1.9.15p5-3ubuntu3UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu24.04sudo1.9.15p5-3ubuntu4UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu24.04sudo1.9.15p5-3ubuntu5UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntu24.04sudo1.9.15p5-3ubuntu5.24.04.1UnknownSource applicability is not established[USN-7604-1][UBUNTU-CVE-2025-32462]
Ubuntuprosudo1.8.27-1ubuntu4UnknownSource applicability is not established[USN-7604-2][UBUNTU-CVE-2025-32462]
Ubuntuprosudo1.8.29-1ubuntu1UnknownSource applicability is not established[USN-7604-2][UBUNTU-CVE-2025-32462]
Ubuntuprosudo1.8.31-1ubuntu1UnknownSource applicability is not established[USN-7604-2][UBUNTU-CVE-2025-32462]
Ubuntuprosudo1.8.31-1ubuntu1.1UnknownSource applicability is not established[USN-7604-2][UBUNTU-CVE-2025-32462]
Ubuntuprosudo1.8.31-1ubuntu1.2UnknownSource applicability is not established[USN-7604-2][UBUNTU-CVE-2025-32462]
Ubuntuprosudo1.8.31-1ubuntu1.4UnknownSource applicability is not established[USN-7604-2][UBUNTU-CVE-2025-32462]
Ubuntuprosudo1.8.31-1ubuntu1.5UnknownSource applicability is not established[USN-7604-2][UBUNTU-CVE-2025-32462]
Ubuntuprosudo1.8.31-1ubuntu1.5+esm1UnknownSource applicability is not established[USN-7604-2][UBUNTU-CVE-2025-32462]
Original provider fields
{
  "package_releases": [
    {
      "name": "sudo",
      "status": "fixed",
      "release": "sid",
      "version": "1.9.17p2-9"
    },
    {
      "name": "sudo",
      "status": "fixed",
      "release": "forky",
      "version": "1.9.17p2-9"
    },
    {
      "name": "sudo",
      "status": "fixed",
      "release": "trixie",
      "version": "1.9.16p2-3+deb13u2"
    },
    {
      "name": "sudo",
      "status": "fixed",
      "release": "bookworm",
      "version": "1.9.13p3-1+deb12u4"
    },
    {
      "name": "sudo",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "1.9.13p3-1+deb12u2"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "sudo",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "1.9.16p2-3"
    },
    {
      "bug": null,
      "name": "sudo",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "1.9.16p2-3"
    },
    {
      "bug": null,
      "name": "sudo",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "1.9.16p2-3"
    },
    {
      "bug": null,
      "name": "sudo",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "1.9.13p3-1+deb12u2"
    }
  ],
  "distribution_packages": [
    {
      "name": "sudo",
      "fixed_version": "1.9.13p3-1+deb12u2",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "fixed_version": "1.9.15p5-3ubuntu5.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "libnss-sudo",
      "fixed_version": "1.9.15p5-3ubuntu5.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "sudo-ldap",
      "fixed_version": "1.9.15p5-3ubuntu5.24.04.1",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.31-1ubuntu1.5+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1.8.27-1ubuntu4",
        "1.8.29-1ubuntu1",
        "1.8.31-1ubuntu1",
        "1.8.31-1ubuntu1.1",
        "1.8.31-1ubuntu1.2",
        "1.8.31-1ubuntu1.4",
        "1.8.31-1ubuntu1.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-7604-2",
      "fixed_version": "1.8.31-1ubuntu1.5+esm1",
      "provider_source": "pypi",
      "provider_record_id": "USN-7604-2",
      "provider_updated_at": "2026-06-25T13:32:30.426219476Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.17p1-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2025:15298-1",
      "fixed_version": "1.9.17p1-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2025:15298-1",
      "provider_updated_at": "2026-03-23T04:53:36.807650Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-slfo.1.1_2.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:20478-1",
      "fixed_version": "1.9.15p5-slfo.1.1_2.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:20478-1",
      "provider_updated_at": "2026-03-23T04:50:51.156104Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-2.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:20489-1",
      "fixed_version": "1.9.15p5-2.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:20489-1",
      "provider_updated_at": "2026-03-23T04:50:09.587248Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-1ubuntu2.5"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1.9.5p2-3ubuntu2",
        "1.9.9-1ubuntu2",
        "1.9.9-1ubuntu2.1",
        "1.9.9-1ubuntu2.2",
        "1.9.9-1ubuntu2.3",
        "1.9.9-1ubuntu2.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-7604-1",
      "fixed_version": "1.9.9-1ubuntu2.5",
      "provider_source": "pypi",
      "provider_record_id": "USN-7604-1",
      "provider_updated_at": "2026-02-10T04:49:28Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-3ubuntu5.24.04.1"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "1.9.14p2-1ubuntu1",
        "1.9.15p5-3ubuntu1",
        "1.9.15p5-3ubuntu3",
        "1.9.15p5-3ubuntu4",
        "1.9.15p5-3ubuntu5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-7604-1",
      "fixed_version": "1.9.15p5-3ubuntu5.24.04.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-7604-1",
      "provider_updated_at": "2026-02-10T04:49:28Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.31-1ubuntu1.5+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1.8.27-1ubuntu4",
        "1.8.29-1ubuntu1",
        "1.8.31-1ubuntu1",
        "1.8.31-1ubuntu1.1",
        "1.8.31-1ubuntu1.2",
        "1.8.31-1ubuntu1.4",
        "1.8.31-1ubuntu1.5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-32462",
      "fixed_version": "1.8.31-1ubuntu1.5+esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-32462",
      "provider_updated_at": "2026-02-04T04:17:33.713354Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-1ubuntu2.5"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1.9.5p2-3ubuntu2",
        "1.9.9-1ubuntu2",
        "1.9.9-1ubuntu2.1",
        "1.9.9-1ubuntu2.2",
        "1.9.9-1ubuntu2.3",
        "1.9.9-1ubuntu2.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-32462",
      "fixed_version": "1.9.9-1ubuntu2.5",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-32462",
      "provider_updated_at": "2026-02-04T04:17:33.713354Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-3ubuntu5.24.04.1"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "1.9.14p2-1ubuntu1",
        "1.9.15p5-3ubuntu1",
        "1.9.15p5-3ubuntu3",
        "1.9.15p5-3ubuntu4",
        "1.9.15p5-3ubuntu5"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-32462",
      "fixed_version": "1.9.15p5-3ubuntu5.24.04.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-32462",
      "provider_updated_at": "2026-02-04T04:17:33.713354Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5p2-150300.3.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02175-1",
      "fixed_version": "1.9.5p2-150300.3.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02175-1",
      "provider_updated_at": "2026-02-04T04:04:15.505426Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5p2-150300.3.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02175-1",
      "fixed_version": "1.9.5p2-150300.3.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02175-1",
      "provider_updated_at": "2026-02-04T04:04:15.505426Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5p2-150300.3.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02175-1",
      "fixed_version": "1.9.5p2-150300.3.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02175-1",
      "provider_updated_at": "2026-02-04T04:04:15.505426Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5p2-150300.3.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02175-1",
      "fixed_version": "1.9.5p2-150300.3.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02175-1",
      "provider_updated_at": "2026-02-04T04:04:15.505426Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5p2-150300.3.36.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02175-1",
      "fixed_version": "1.9.5p2-150300.3.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02175-1",
      "provider_updated_at": "2026-02-04T04:04:15.505426Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.5p2-150300.3.36.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02175-1",
      "fixed_version": "1.9.5p2-150300.3.36.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02175-1",
      "provider_updated_at": "2026-02-04T04:04:15.505426Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-150400.4.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02178-1",
      "fixed_version": "1.9.9-150400.4.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02178-1",
      "provider_updated_at": "2026-02-04T04:00:41.260077Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-150400.4.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02178-1",
      "fixed_version": "1.9.9-150400.4.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02178-1",
      "provider_updated_at": "2026-02-04T04:00:41.260077Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-150400.4.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02178-1",
      "fixed_version": "1.9.9-150400.4.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02178-1",
      "provider_updated_at": "2026-02-04T04:00:41.260077Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-150400.4.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02178-1",
      "fixed_version": "1.9.9-150400.4.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02178-1",
      "provider_updated_at": "2026-02-04T04:00:41.260077Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-150400.4.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02178-1",
      "fixed_version": "1.9.9-150400.4.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02178-1",
      "provider_updated_at": "2026-02-04T04:00:41.260077Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-150400.4.39.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02178-1",
      "fixed_version": "1.9.9-150400.4.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02178-1",
      "provider_updated_at": "2026-02-04T04:00:41.260077Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-150400.4.39.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02178-1",
      "fixed_version": "1.9.9-150400.4.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02178-1",
      "provider_updated_at": "2026-02-04T04:00:41.260077Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.9-150400.4.39.1"
            }
          ]
        }
      ],
      "release": "manager server 4.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02178-1",
      "fixed_version": "1.9.9-150400.4.39.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02178-1",
      "provider_updated_at": "2026-02-04T04:00:41.260077Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-150600.3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02177-1",
      "fixed_version": "1.9.15p5-150600.3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02177-1",
      "provider_updated_at": "2026-02-04T03:34:21.201287Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-150600.3.9.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02177-1",
      "fixed_version": "1.9.15p5-150600.3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02177-1",
      "provider_updated_at": "2026-02-04T03:34:21.201287Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.15p5-150600.3.9.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02177-1",
      "fixed_version": "1.9.15p5-150600.3.9.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02177-1",
      "provider_updated_at": "2026-02-04T03:34:21.201287Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.12p1-150500.7.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02179-1",
      "fixed_version": "1.9.12p1-150500.7.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02179-1",
      "provider_updated_at": "2026-02-04T02:41:40.005818Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.12p1-150500.7.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02179-1",
      "fixed_version": "1.9.12p1-150500.7.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02179-1",
      "provider_updated_at": "2026-02-04T02:41:40.005818Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.12p1-150500.7.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02179-1",
      "fixed_version": "1.9.12p1-150500.7.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02179-1",
      "provider_updated_at": "2026-02-04T02:41:40.005818Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.12p1-150500.7.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02179-1",
      "fixed_version": "1.9.12p1-150500.7.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02179-1",
      "provider_updated_at": "2026-02-04T02:41:40.005818Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.9.12p1-150500.7.13.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02179-1",
      "fixed_version": "1.9.12p1-150500.7.13.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02179-1",
      "provider_updated_at": "2026-02-04T02:41:40.005818Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.27-4.54.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 12 sp5-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02174-1",
      "fixed_version": "1.8.27-4.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02174-1",
      "provider_updated_at": "2025-07-01T12:59:35.074579Z",
      "applicability_unknown": true
    },
    {
      "name": "sudo",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.8.27-4.54.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server ltss extended security 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:02174-1",
      "fixed_version": "1.8.27-4.54.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:02174-1",
      "provider_updated_at": "2025-07-01T12:59:35.074579Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libnss-sudo]Unknown

    Source package: [sudo]

    Details (4)
    • 1.9.13p3-1+deb12u4 · all · bookworm

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u4 · all · bookworm

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u2 · all · bookworm-security

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u2 · all · bookworm-security

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

  • [sudo]Unknown
    Details (4)
    • 1.9.13p3-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

  • [sudo-ldap]Unknown

    Source package: [sudo]

    Details (4)
    • 1.9.13p3-1+deb12u4 · amd64 · bookworm

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u4 · arm64 · bookworm

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

    • 1.9.13p3-1+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1.9.13p3-1+deb12u2

      usn · sudo · debian · bookworm; usn · sudo · debian · 12

[Debian 13 (Trixie)]

  • [libnss-sudo]Unknown

    Source package: [sudo]

    Details (2)
    • 1.9.16p2-3+deb13u2 · all · trixie

      Fixed · Fixed: 1.9.16p2-3

      usn · sudo · debian · 13

    • 1.9.16p2-3+deb13u2 · all · trixie

      Fixed · Fixed: 1.9.16p2-3

      usn · sudo · debian · 13

  • [sudo]Unknown
    Details (2)
    • 1.9.16p2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 1.9.16p2-3

      usn · sudo · debian · 13

    • 1.9.16p2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 1.9.16p2-3

      usn · sudo · debian · 13

  • [sudo-ldap]Unknown

    Source package: [sudo]

    Details (2)
    • 1.9.16p2-3+deb13u2 · amd64 · trixie

      Fixed · Fixed: 1.9.16p2-3

      usn · sudo · debian · 13

    • 1.9.16p2-3+deb13u2 · arm64 · trixie

      Fixed · Fixed: 1.9.16p2-3

      usn · sudo · debian · 13

[openSUSE Tumbleweed]

  • [sudo]Unknown

    Source package: [sudo]

    Details (1)
    • 1.9.17p2-3.3 · x86_64 · tumbleweed

      Fixed · Fixed: 1.9.17p1-1.1

      usn · sudo · opensuse · tumbleweed

  • [sudo-devel]Unknown

    Source package: [sudo]

    Details (1)
    • 1.9.17p2-3.3 · x86_64 · tumbleweed

      Unknown · Fixed: 1.9.17p1-1.1

      Version impact unknown

      usn · sudo · opensuse · tumbleweed

  • Source package: [sudo]

    Details (1)
    • 1.9.17p2-3.3 · x86_64 · tumbleweed

      Unknown · Fixed: 1.9.17p1-1.1

      Version impact unknown

      usn · sudo · opensuse · tumbleweed

  • Source package: [sudo]

    Details (1)
    • 1.9.17p2-3.3 · noarch · tumbleweed

      Unknown · Fixed: 1.9.17p1-1.1

      Version impact unknown

      usn · sudo · opensuse · tumbleweed

  • Source package: [sudo]

    Details (1)
    • 1.9.17p2-3.3 · noarch · tumbleweed

      Unknown · Fixed: 1.9.17p1-1.1

      Version impact unknown

      usn · sudo · opensuse · tumbleweed

  • [sudo-test]Unknown

    Source package: [sudo]

    Details (1)
    • 1.9.17p2-3.3 · x86_64 · tumbleweed

      Unknown · Fixed: 1.9.17p1-1.1

      Version impact unknown

      usn · sudo · opensuse · tumbleweed

  • Source package: [sudo]

    Details (1)
    • 1.9.17p2-3.3 · noarch · tumbleweed

      Unknown · Fixed: 1.9.17p1-1.1

      Version impact unknown

      usn · sudo · opensuse · tumbleweed

Observed:

References