CVEvulnerability
CVE-2021-3156
CISA Known Exploited Vulnerability
Sudo Heap-Based Buffer Overflow Vulnerability — Sudo Sudo
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
- Added to KEV
- 2022-04-06
- Remediation due
- 2022-04-27
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Notes
- https://nvd.nist.gov/vuln/detail/CVE-2021-3156
- Status
- Analyzed
- Published
- 2021-01-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-193
Description
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
Affected configurations
• sudo project sudo (>= 1.8.2 < 1.8.32)
• sudo project sudo (>= 1.9.0 < 1.9.5)
• sudo project sudo 1.9.5
• fedoraproject fedora 32
• fedoraproject fedora 33
• debian debian linux 9.0
• debian debian linux 10.0
• netapp active iq unified manager
• netapp cloud backup
• netapp hci management node
• netapp oncommand unified manager core package
• netapp ontap select deploy administration utility
• netapp ontap tools 9
• netapp solidfire
• mcafee web gateway 8.2.17
• mcafee web gateway 9.2.8
• mcafee web gateway 10.0.4
• synology diskstation manager unified controller 3.0
• synology diskstation manager 6.2
• synology skynas firmware
• synology vs960hd firmware
• beyondtrust privilege management for mac (< 21.1.1)
• beyondtrust privilege management for unix\/linux (< 10.3.2-10)
• oracle micros compact workstation 3 firmware 310
• oracle micros es400 firmware (>= 400 <= 410)
• oracle micros kitchen display system firmware 210
• oracle micros workstation 5a firmware 5a
• oracle micros workstation 6 firmware (>= 610 <= 655)
• oracle communications performance intelligence center (>= 10.3.0.0.0 <= 10.3.0.2.1)
• oracle communications performance intelligence center (>= 10.4.0.1.0 <= 10.4.0.3.1)
• oracle tekelec platform distribution (>= 7.4.0 <= 7.7.1)
Related
Weakness · CWE (1)
- CWE-193 Off-by-one Error weakness
References
- http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2021/Feb/42 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Jan/79 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Feb/3 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/01/27/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/01/27/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/02/15/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/14/2 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2024/01/30/6 Exploit, Mailing List
- http://www.openwall.com/lists/oss-security/2024/01/30/8 Mailing List
- https://kc.mcafee.com/corporate/index?page=content&id=SB10348 Broken Link, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ Mailing List, Release Notes
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ Mailing List, Release Notes
- https://security.gentoo.org/glsa/202101-33 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210128-0001/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210128-0002/ Third Party Advisory
- https://support.apple.com/kb/HT212177 Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM Third Party Advisory
- https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability Third Party Advisory
- https://www.debian.org/security/2021/dsa-4839 Third Party Advisory
- https://www.kb.cert.org/vuls/id/794544 Third Party Advisory, US Government Resource
- https://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit, Mailing List, Third Party Advisory
- https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
- https://www.sudo.ws/stable.html#1.9.5p2 Release Notes
- https://www.synology.com/security/advisory/Synology_SA_21_02 Third Party Advisory
- https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156 Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html Exploit, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2021/Feb/42 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Jan/79 Exploit, Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Feb/3 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/01/27/1 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/01/27/2 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/02/15/1 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/09/14/2 Mailing List, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2024/01/30/6 Exploit, Mailing List
- http://www.openwall.com/lists/oss-security/2024/01/30/8 Mailing List
- https://kc.mcafee.com/corporate/index?page=content&id=SB10348 Broken Link, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html Mailing List, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ Mailing List, Release Notes
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ Mailing List, Release Notes
- https://security.gentoo.org/glsa/202101-33 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210128-0001/ Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210128-0002/ Third Party Advisory
- https://support.apple.com/kb/HT212177 Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM Third Party Advisory
- https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability Third Party Advisory
- https://www.debian.org/security/2021/dsa-4839 Third Party Advisory
- https://www.kb.cert.org/vuls/id/794544 Third Party Advisory, US Government Resource
- https://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit, Mailing List, Third Party Advisory
- https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
- https://www.sudo.ws/stable.html#1.9.5p2 Release Notes
- https://www.synology.com/security/advisory/Synology_SA_21_02 Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3156 US Government Resource