Exploit for Off-by-one Error in Sudo Project Sudo

githubexploit · 2021-02-08

Description

Sudo project heap overflow exploit CVE-2021-3156 for Debian 1

Affected Sudo Project Sudo versions

Sudo Project Sudo< 1.8.32, 1.9.5

All known vulnerabilities by product

Alt Linux Centos Huawei Vrp Linuxmint Apple Macos Red Hat Sudo Suse

CVSS 7.8 for CVE-2021-3156

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

93%confidence this exploit runs

Based on 20 file(s) in the source

EPSS Score

99.3%higher than 99.9% of all CVEs

Updated 2026-06-29

Exploit Details

Modified:2025-08-14 09:43

Last Seen:2025-08-31 20:58

Reporter:0xdevil

Written in:C

Last commit:2021-12-03

Tags

sudoCVE-2021-3156heap overflowglibcdebian 10

Other exploits for CVE-2021-3156

PoC_n_Dockerfile_4_PentestFinalProject_Group02

2026-04-14 BaodeptraiiGITHUB

Exploit for Off-by-one Error in Sudo_Project Sudo

2026-03-18 Rana-Ali93GITHUB

Exploit for Race Condition in Canonical Ubuntu_Linux

2026-03-16 PentesterTNGITHUB

Exploit for Off-by-one Error in Sudo_Project Sudo

2026-03-11 TheLeopard65GITHUB

Exploit for Off-by-one Error in Sudo_Project Sudo

2026-01-06 varungor365GITHUB

Exploit for Race Condition in Canonical Ubuntu_Linux

2025-11-08 MadExploitsGITHUB

Exploit for Off-by-one Error in Sudo_Project Sudo

2025-09-06 热门极速下载GITEE

Exploit for Off-by-one Error in Sudo_Project Sudo

2025-02-08 ten-opsGITHUB

Exploit Code

README28 lines

## https://sploitus.com/exploit?id=BC98F6B9-CA75-554C-ACA1-30325FC62B0E
# CVE-2021-3156
CVE-2021-3156: Sudo heap overflow exploit for Debian 10 

Vulnerability analysis and exploit development: https://syst3mfailure.io/sudo-heap-overflow

![img](exploit.gif)

Exploit designed for:

- Sudo:

        Version 1.8.27 (1.8.27-1+deb10u1)
        Checksum (sha256): b83f8f4e763ae9860f1e3bde7f6cc913da51ceccc31d84c1cca2f86ac680e1de

        Version 1.8.27 (1.8.27-1+deb10u2)
        Checksum (sha256): ca4a94e0a49f59295df5522d896022444cbbafdec4d94326c1a7f333fd030038
        
- Glibc:

        Version 2.28
        Checksum (sha256): dedb887a5c49294ecd850d86728a0744c0e7ea780be8de2d4fc89f6948386937

- Debian 10:

        Linux debian 4.19.0-10-amd64 #1 SMP Debian 4.19.132-1 (2020-07-24) x86_64 GNU/Linux
        Linux debian 4.19.0-13-amd64 #1 SMP Debian 4.19.160-2 (2020-11-28) x86_64 GNU/Linux
        Linux debian 4.19.0-14-amd64 #1 SMP Debian 4.19.171-2 (2021-01-30) x86_64 GNU/Linux