CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-01-26
Sudo Heap-Based Buffer Overflow Local Privilege Escalation Vulnerability (CVE-2021-3156, Baron Samedit)
[Affected Scope] Unix-like operating systems running Sudo versions 1.8.2 through 1.8.31p2, and 1.9.0 through 1.9.5p1
[Impact] A local non-privileged attacker can exploit this vulnerability via 'sudoedit -s' with a trailing backslash to escalate privileges to root
[Mitigation] Immediately upgrade Sudo to version 1.9.5p2 or later, or restrict execution permissions for sudoedit as a temporary workaround