Creative Commons Zero v1.0 Universal

项目介绍

kh4sh3i/CVE-2025-32463 是一个托管在 GitHub 上的开源项目,主要使用 Shell 编写,采用 Creative Commons Zero v1.0 Universal 许可证,目前获得 469 个 Star、61 次 Fork。

仓库全名
kh4sh3i/CVE-2025-32463
开源许可证
Creative Commons Zero v1.0 Universal
Star 数
469
Fork 数
61
未关闭 Issue
3

README 摘要

CVE-2025-32463 Local Privilege Escalation to Root via Sudo chroot in Linux 🛑 Vulnerability Summary CVE-2025-32463 is a local privilege escalation vulnerability in the Sudo binary. The flaw allows a local user to escalate privileges to root under specific misconfigurations or with crafted inputs. The issue was discovered by Rich Mirch. CVE-ID: CVE-2025-32463 Component: sudo Type: Local Privilege Escalation (EoP)…

完整内容见 GitHub 原始 README 或本页 。

常见问题

CVE-2025-32463 用什么语言开发?

主要使用 Shell 编写,采用 Creative Commons Zero v1.0 Universal 许可证,目前有 469 个 Star。

CVE-2025-32463 可以免费商用吗?

仓库标注的许可证为 Creative Commons Zero v1.0 Universal,商用前请先阅读仓库 LICENSE 文件确认授权范围。

如何获取 CVE-2025-32463 的源码?

可以直接克隆仓库:git clone https://github.com/kh4sh3i/CVE-2025-32463.git,默认分支为 main;安装与运行步骤见仓库 README。

CVE-2025-32463 最近还在维护吗?

仓库最近一次更新为 2025年7月2日,当前有 3 个未关闭 Issue;Star 数为 469,可作为社区活跃度的参考。

关于

Local Privilege Escalation to Root via Sudo chroot in Linux

描述取自 GitHub 官方 API,中文内容由 GitRead 中文社区 编辑团队整理。

简要分析

热度分
594
价值分
299
活跃状态
活跃

语言占比

Shell

贡献者

README



CVE-2025-32463

Local Privilege Escalation to Root via Sudo chroot in Linux

🛑 Vulnerability Summary

CVE-2025-32463 is a local privilege escalation vulnerability in the Sudo binary. The flaw allows a local user to escalate privileges to root under specific misconfigurations or with crafted inputs. The issue was discovered by Rich Mirch.

  • CVE-ID: CVE-2025-32463
  • Component: sudo
  • Type: Local Privilege Escalation (EoP)
  • CVSS Score: TBD
  • Discovered by: Rich Mirch

🔥 Impact

An attacker with low privileges can exploit this vulnerability to gain root access, compromising the system entirely.

🧪 Proof of Concept

Exploit

git clone https://github.com/kh4sh3i/CVE-2025-32463.git
cd CVE-2025-32463
chmod +x exploit.sh
id
./exploit.sh
id

🛠 Affected Versions

  • Vulnerable: sudo 1.9.14 to 1.9.17
  • Patched: sudo 1.9.17p1 and later
  • Not affected: Legacy versions prior to 1.9.14 (chroot feature did not exist)

🛡️ Mitigation

  • Update sudo to the latest patched version.
  • Use security frameworks like AppArmor or SELinux to limit sudo behavior.
  • Monitor for abnormal sudo invocations.

🧷 References

⚠️ Disclaimer

This PoC is provided for educational and research purposes only. Running this on any system without permission is illegal and unethical.

评论

暂无评论