## https://sploitus.com/exploit?id=D07C33C1-6119-5830-BB28-708A935860A5
PoC exploit for CVE-2021-3156, a heap overflow vulnerability in sudoedit.
The target product/service is sudoedit, a command-line utility for editing files with superuser privileges. The vulnerability class/vector is a heap overflow, which can lead to a privilege escalation (LPE).
The probable entry point is the sudoedit command, which is executed with the provided arguments. Notable dependencies/tooling include the Go programming language and the execve syscall. The execution context is a command-line interface (CLI) usage, where the user provides the path to the sudoedit binary and the arguments to be passed to it.
The exploit is designed to smash the heap by overflowing it with a large amount of data, causing a buffer overflow. This can lead to the execution of arbitrary code, resulting in a privilege escalation. The exploit uses the Go programming language to create a custom binary that can be used to exploit the vulnerability.
The expected impact of the exploit is a privilege escalation, where the attacker gains elevated privileges on the system. The observable network or file artifacts/IO include the creation of a custom binary and the execution of the exploit, which can be detected by monitoring system calls and file system activity.