← CVE Radar
CVE-2021-3156Sudo Heap-Based Buffer Overflow Vulnerability
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
7.8 HIGHEPSS 99.96%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 7.2 | HIGH | 2.0NVD | AV:L/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Apr 27, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2021-3156
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Jan 26, 2021
- Last modified
- 2026-06-17 04:04 UTC
Affected Products
From NVD CPE configurations.
sudo projectsudo4 version ranges
- 1.8.2 before 1.8.32
- 1.9.0 before 1.9.5
- 1.9.5
- 1.9.5 patch1
fedoraprojectfedora2 version ranges
- 32
- 33
debiandebian linux2 version ranges
- 9.0
- 10.0
netappactive iq unified manager0 version ranges
No version detail published.
netappcloud backup0 version ranges
No version detail published.
netapphci management node0 version ranges
No version detail published.
netapponcommand unified manager core package0 version ranges
No version detail published.
netappontap select deploy administration utility0 version ranges
No version detail published.
netappontap tools1 version range
- 9
netappsolidfire0 version ranges
No version detail published.
mcafeeweb gateway3 version ranges
- 8.2.17
- 9.2.8
- 10.0.4
synologydiskstation manager unified controller1 version range
- 3.0
synologydiskstation manager1 version range
- 6.2
synologyskynas firmware0 version ranges
No version detail published.
synologyvs960hd firmware0 version ranges
No version detail published.
beyondtrustprivilege management for mac1 version range
- before 21.1.1
beyondtrustprivilege management for unix/linux1 version range
- before 10.3.2-10
oraclemicros compact workstation 3 firmware1 version range
- 310
oraclemicros es400 firmware1 version range
- 400 through 410
oraclemicros kitchen display system firmware1 version range
- 210
oraclemicros workstation 5a firmware1 version range
- 5a
oraclemicros workstation 6 firmware1 version range
- 610 through 655
oraclecommunications performance intelligence center2 version ranges
- 10.3.0.0.0 through 10.3.0.2.1
- 10.4.0.1.0 through 10.4.0.3.1
oracletekelec platform distribution1 version range
- 7.4.0 through 7.7.1
References
- packetstormsecurity.com http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html
- packetstormsecurity.com http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html
- packetstormsecurity.com http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html
- packetstormsecurity.com http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html
- packetstormsecurity.com http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html
- seclists.org http://seclists.org/fulldisclosure/2021/Feb/42
- seclists.org http://seclists.org/fulldisclosure/2021/Jan/79
- seclists.org http://seclists.org/fulldisclosure/2024/Feb/3
- openwall.com http://www.openwall.com/lists/oss-security/2021/01/26/3
- openwall.com http://www.openwall.com/lists/oss-security/2021/01/27/1
- openwall.com http://www.openwall.com/lists/oss-security/2021/01/27/2
- openwall.com http://www.openwall.com/lists/oss-security/2021/02/15/1
- openwall.com http://www.openwall.com/lists/oss-security/2021/09/14/2
- openwall.com http://www.openwall.com/lists/oss-security/2024/01/30/6
- openwall.com http://www.openwall.com/lists/oss-security/2024/01/30/8
- kc.mcafee.com https://kc.mcafee.com/corporate/index?page=content&id=SB10348
- lists.debian.org https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html
- lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/
- lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/
- security.gentoo.org https://security.gentoo.org/glsa/202101-33
- security.netapp.com https://security.netapp.com/advisory/ntap-20210128-0001/
- security.netapp.com https://security.netapp.com/advisory/ntap-20210128-0002/
- support.apple.com https://support.apple.com/kb/HT212177
- tools.cisco.com https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM
- beyondtrust.com https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability
- debian.org https://www.debian.org/security/2021/dsa-4839
- kb.cert.org https://www.kb.cert.org/vuls/id/794544
- openwall.com https://www.openwall.com/lists/oss-security/2021/01/26/3
- oracle.com https://www.oracle.com//security-alerts/cpujul2021.html
- oracle.com https://www.oracle.com/security-alerts/cpuapr2022.html
- oracle.com https://www.oracle.com/security-alerts/cpuoct2021.html
- sudo.ws https://www.sudo.ws/stable.html#1.9.5p2
- synology.com https://www.synology.com/security/advisory/Synology_SA_21_02
- vicarius.io https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3156