CVE-2021-3156
HighActively exploited (CISA KEV)
Description
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Sudo
PublishedJan 26, 2021
First seenJan 26, 2021
Added to KEVApr 6, 2022
Weakness typeCWE-193CWE-193
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Apr 27, 2022Update
- sudo_project sudo1.8.32, 1.9.5 or later
- beyondtrust privilege_management_for_mac21.1.1 or later
- beyondtrust privilege_management_for_unix\/linux10.3.2-10 or later
Vendor advisories
- security.gentoo.org/glsa/202101-33
- debian.org/security/2021/dsa-4839
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sudo_project sudo | 1.8.2 ≤ v < 1.8.32, 1.9.0 ≤ v < 1.9.5, 1.9.5 | 1.8.32, 1.9.5 |
| fedoraproject fedora | 32, 33 | — |
| debian debian_linux | 9.0, 10.0 | — |
| netapp active_iq_unified_manager | No range specified | — |
| netapp cloud_backup | No range specified | — |
| netapp hci_management_node | No range specified | — |
| netapp oncommand_unified_manager_core_package | No range specified | — |
| netapp ontap_select_deploy_administration_utility | No range specified | — |
| netapp ontap_tools | 9 | — |
| netapp solidfire | No range specified | — |
| mcafee web_gateway | 8.2.17, 9.2.8, 10.0.4 | — |
| synology diskstation_manager_unified_controller | 3.0 | — |
| synology diskstation_manager | 6.2 | — |
| synology skynas_firmware | No range specified | — |
| synology vs960hd_firmware | No range specified | — |
| beyondtrust privilege_management_for_mac | v < 21.1.1 | 21.1.1 |
| beyondtrust privilege_management_for_unix\/linux | v < 10.3.2-10 | 10.3.2-10 |
| oracle micros_compact_workstation_3_firmware | 310 | — |
| oracle micros_es400_firmware | 400 ≤ v ≤ 410 | — |
| oracle micros_kitchen_display_system_firmware | 210 | — |
| oracle micros_workstation_5a_firmware | 5a | — |
| oracle micros_workstation_6_firmware | 610 ≤ v ≤ 655 | — |
| oracle communications_performance_intelligence_center | 10.3.0.0.0 ≤ v ≤ 10.3.0.2.1, 10.4.0.1.0 ≤ v ≤ 10.4.0.3.1 | — |
| oracle tekelec_platform_distribution | 7.4.0 ≤ v ≤ 7.7.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.