CVE-2021-3156

Fixed in a distro release ExploitedEPSS 100%CVSS 7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Published 2021-01-26 · In CISA KEV since 2022-04-06 · CVE record · OSV

Products: sudo_project sudo, fedoraproject fedora, debian_linux, netapp active_iq_unified_manager, netapp cloud_backup, netapp hci_management_node, netapp oncommand_unified_manager_core_package, netapp ontap_select_deploy_administration_utility, netapp ontap_tools, netapp solidfire, mcafee web_gateway, synology diskstation_manager_unified_controller, synology diskstation_manager, synology skynas_firmware, synology vs960hd_firmware, beyondtrust privilege_management_for_mac, beyondtrust privilege_management_for_unix/linux, oracle micros_compact_workstation_3_firmware, oracle micros_es400_firmware, oracle micros_kitchen_display_system_firmware, oracle micros_workstation_5a_firmware, oracle micros_workstation_6_firmware, oracle communications_performance_intelligence_center, oracle tekelec_platform_distribution

Distro releases