CVE-2021-3156
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
- Affected products
- Alt Linux, Centos, Huawei Vrp, Linuxmint, Apple Macos, Red Hat, Sudo, Suse
- Sudo Project Sudo
- < 1.8.32, 1.9.5
- Fix
- Available
- CVSS 3.1
- 7.8 HIGH
- EPSS
- 99.3% (100th percentile)
- Weakness
- CWE-193
- NVD status
- Analyzed
- Published
- 2021-01-26
CVE-2021-3156 at NVD
80 known exploits for CVE-2021-3156
Proof-of-concept code and exploit modules indexed by Sploitus
PoC_n_Dockerfile_4_PentestFinalProject_Group02
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Race Condition in Canonical Ubuntu_Linux
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Race Condition in Canonical Ubuntu_Linux
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
glibc syslog() Heap-Based Buffer Overflow Exploit
glibc syslog() Heap-Based Buffer Overflow
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Race Condition in Canonical Ubuntu_Linux
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Improper Input Validation in Google Chrome
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Improper Access Control in Xen
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Improper Input Validation in Google Chrome
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Sudo 1.8.31p2 / 1.9.5p1 Buffer Overflow Exploit
Sudo 1.8.31p2 / 1.9.5p1 Buffer Overflow
Sudo Heap-Based Buffer Overflow
Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (1)
Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (2)
Sudo 1.9.5p1 Buffer Overflow / Privilege Escalation
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Sudo 1.9.5p1 - (Baron Samedit) Heap-Based Buffer Overflow Privilege Escalation Exploit (1)
Sudo 1.9.5p1 - (Baron Samedit) Heap-Based Buffer Overflow Privilege Escalation Exploit (2)
Sudo Buffer Overflow / Privilege Escalation
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Sudo version 1.8.2 to 1.8.31p2 Heap-Based Buffer Overflow Vulnerability
Sudo Heap-Based Buffer Overflow
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Off-by-one Error in Sudo_Project Sudo
Exploit for Improper Input Validation in Google Chrome
Exploit for Off-by-one Error in Sudo_Project Sudo