Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-3156HistoryJan 26, 2021 - 9:15 p.m.
CVE-2021-3156
2021-01-2621:15:00
Debian Security Bug Tracker
security-tracker.debian.org
21
0.97 High
EPSS
Percentile
99.7%
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via “sudoedit -s” and a command-line argument that ends with a single backslash character.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | sudo | < 1.9.5p1-1.1 | sudo_1.9.5p1-1.1_all.deb |
| Debian | 11 | all | sudo | < 1.9.5p1-1.1 | sudo_1.9.5p1-1.1_all.deb |
| Debian | 10 | all | sudo | < 1.8.27-1+deb10u3 | sudo_1.8.27-1+deb10u3_all.deb |
| Debian | 999 | all | sudo | < 1.9.5p1-1.1 | sudo_1.9.5p1-1.1_all.deb |
| Debian | 13 | all | sudo | < 1.9.5p1-1.1 | sudo_1.9.5p1-1.1_all.deb |
Related
nessus
nessus
FreeBSD : sudo -- Multiple vulnerabilities (f3cf4b33-6013-11eb-9a0e-206a8a720317)
2021-01-27 00:00:00
Photon OS 2.0: Sudo PHSA-2021-2.0-0315
2021-01-29 00:00:00
EulerOS 2.0 SP2 : sudo (EulerOS-SA-2021-1366)
2021-02-22 00:00:00
githubexploit
githubexploit
Exploit for Off-by-one Error in Sudo Project Sudo
2021-01-27 21:49:06
Exploit for Off-by-one Error in Sudo Project Sudo
2021-01-30 10:53:26
Exploit for Off-by-one Error in Sudo Project Sudo
2021-01-31 07:01:50
ibm
ibm
photon
photon
osv
osv
CVE-2021-3156
2021-01-26 21:15:12
sudo - security update
2021-01-26 00:00:00
sudo vulnerability
2021-01-27 15:01:20
packetstorm
packetstorm
Sudo Buffer Overflow / Privilege Escalation
2021-02-01 00:00:00
Sudo 1.9.5p1 Buffer Overflow / Privilege Escalation
2021-02-03 00:00:00
Sudo Heap-Based Buffer Overflow
2021-01-27 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.9.5p2-alt0.M80P.1
2021-02-06 00:00:00
Security fix for the ALT Linux 8 package sudo version 1:1.9.5p2-alt1
2021-01-27 00:00:00
avleonov
avleonov
Vulristics: Beyond Microsoft Patch Tuesdays, Analyzing Arbitrary CVEs
2021-03-02 01:07:00
openvas
openvas
Debian: Security Advisory (DSA-4839-1)
2021-01-27 00:00:00
openSUSE: Security Advisory for sudo (openSUSE-SU-2021:0602-1)
2021-04-24 00:00:00
Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2021-1366)
2021-02-22 00:00:00
oraclelinux
oraclelinux
sudo security update
2021-01-27 00:00:00
sudo security update
2021-01-27 00:00:00
sudo security update
2021-01-27 00:00:00
ubuntu
ubuntu
Sudo vulnerability
2021-01-27 00:00:00
ubuntucve
ubuntucve
CVE-2021-3156
2021-01-26 00:00:00
zdt
zdt
Sudo 1.9.5p1 - (Baron Samedit) Heap-Based Buffer Overflow Privilege Escalation Exploit (1)
2021-02-01 00:00:00
Sudo 1.8.31p2 / 1.9.5p1 Buffer Overflow Exploit
2021-02-05 00:00:00
redhat
redhat
(RHSA-2021:0222) Important: sudo security update
2021-01-26 18:59:36
(RHSA-2021:0226) Important: sudo security update
2021-01-26 18:56:10
(RHSA-2021:0221) Important: sudo security update
2021-01-26 18:54:37
attackerkb
attackerkb
CVE-2021-3156 "Baron Samedit"
2021-01-26 00:00:00
rapid7blog
rapid7blog
Cisco Patches Recently Disclosed "sudo" Vulnerability (CVE-2021-3156) in Multiple Products
2021-02-04 21:04:49
Metasploit Wrap-Up
2021-02-05 19:30:43
debian
debian
[SECURITY] [DSA 4839-1] sudo security update
2021-01-26 18:05:33
[SECURITY] [DSA 4839-1] sudo security update
2021-01-26 18:05:52
[SECURITY] [DLA 2534-1] sudo security update
2021-01-26 18:36:34
fedora
fedora
[SECURITY] Fedora 32 Update: sudo-1.9.5p2-1.fc32
2021-01-27 04:12:23
[SECURITY] Fedora 33 Update: sudo-1.9.5p2-1.fc33
2021-01-27 01:19:48
suse
suse
Security update for sudo (important)
2021-04-23 00:00:00
cisa_kev
cisa_kev
Sudo Heap-Based Buffer Overflow Vulnerability
2022-04-06 00:00:00
cloudlinux
cloudlinux
Fix CVE-2021-3156: Heap-based buffer overflow in sudo
2021-01-27 12:30:00
cve
cve
CVE-2021-3156
2021-01-26 21:15:00
almalinux
almalinux
Important: sudo security update
2021-01-26 18:53:36
cisa
cisa
Sudo Heap-Based Buffer Overflow Vulnerability — CVE-2021-3156
2021-02-02 00:00:00
f5
f5
K86488846 : Sudo vulnerability CVE-2021-3156
2021-01-29 00:00:00
alpinelinux
alpinelinux
CVE-2021-3156
2021-01-26 21:15:00
virtuozzo
virtuozzo
ics
ics
Johnson Controls Sensormatic Tyco AI
2021-05-13 12:00:00
Johnson Controls Sensormatic Electronics Illustra
2021-09-02 12:00:00
Johnson Controls Sensormatic Electronics VideoEdge
2021-05-27 12:00:00
cisco
cisco
paloalto
paloalto
Informational: Impact of Sudo Vulnerability CVE-2021-3156
2021-02-10 17:00:00
centos
centos
sudo security update
2021-01-27 00:11:23
metasploit
metasploit
Sudo Heap-Based Buffer Overflow
2021-02-04 14:25:40
cert
cert
Sudo set_cmd() is vulnerable to heap-based buffer overflow
2021-02-04 00:00:00
checkpoint_security
checkpoint_security
Check Point CVE-2021-3156 (sudo Privilege Escalation)
2021-01-28 08:21:18
veracode
veracode
Privilege Escalation
2021-01-26 21:59:42
qualysblog
qualysblog
Qualys Research Wins Two 2021 Pwnie Awards
2021-08-05 01:44:02
CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)
2021-01-26 18:09:09
threatpost
threatpost
HPE Warns Sudo Bug Gives Attackers Root Privileges to Aruba Platform
2021-08-30 21:46:56
Sudo Bug Gives Root Access to Mass Numbers of Linux Systems
2021-01-27 19:16:41
redhatcve
redhatcve
CVE-2021-3156
2021-01-26 19:51:28
amazon
amazon
Important: sudo
2021-01-25 23:09:00
Important: sudo
2021-01-26 00:11:00
mageia
mageia
Updated sudo packages fix security vulnerability
2021-01-27 03:40:21
huawei
huawei
Security Advisory - Sudo Privilege Escalation Vulnerability
2021-03-10 00:00:00
prion
prion
Heap overflow
2021-01-26 21:15:00
cvelist
cvelist
CVE-2021-3156
2021-01-26 00:00:00
freebsd
freebsd
sudo -- Multiple vulnerabilities
2021-01-26 00:00:00
slackware
slackware
[slackware-security] sudo
2021-01-26 21:34:51
exploitdb
exploitdb