Sudo Heap-Based Buffer Overflow Vulnerability — CVE-2021-3156

ronjor · Feb 2, 2021

Original release date: February 02, 2021

Sudo has released an advisory addressing a heap-based buffer overflow vulnerability—CVE-2021-3156—affecting sudo legacy versions 1.8.2 through 1.8.31p2 and stable versions 1.9.0 through 1.9.5p1. Sudo is a utility included in many Unix- and Linux-based operating systems that allows a user to run programs with the security privileges of another user. An attacker could exploit this vulnerability to take control of an affected system.
CISA encourages users and administrators to update to sudo version 1.9.5p2, refer to vendors for available patches, and review the following resources for additional information.
Sudo Advisory
Qualys Blog
Click to expand...

ronjor · Feb 25, 2021

Heap-Based Buffer Overflow in Sudo

Vulnerability Note VU#794544
Original Release Date: 2021-02-04 | Last Revised: 2021-02-24
Overview
A heap-based overflow has been discovered in sudo, which may allow a local attacker to execute commands with elevated administrator privileges.
Click to expand...

Solution
Apply an Update
Update sudo to the latest version to address this vulnerability when operationally feasible. This issue is resolved in sudo version 1.9.5p2. Please install this version, or a version from your distribution that has the fix applied to it
Click to expand...

Log in or Sign up

Sudo Heap-Based Buffer Overflow Vulnerability — CVE-2021-3156

ronjor Global Moderator

ronjor Global Moderator

Log in or Sign up

Sudo Heap-Based Buffer Overflow Vulnerability — CVE-2021-3156

ronjor Global Moderator

ronjor Global Moderator

Useful Searches