CVE-2021-3156

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 100,0%

Kerentanan Off-by-one Error pada sudo project sudo, fedoraproject fedora +22 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 6 April 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Rincian

Terbit di NVD

26 Januari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-193: Off-by-one Error

EPSS (30 hari)

100,0% peluang dieksploitasi; lebih tinggi dari 99,9% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Sudo Heap-Based Buffer Overflow Vulnerability

Masuk KEV

6 April 2022

Tenggat CISA

27 April 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.openwall.com/lists/oss-security/2021/09/14/2 mailing list · patch · advisory pihak ketiga
• https://www.oracle.com//security-alerts/cpujul2021.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
• https://www.oracle.com/security-alerts/cpuoct2021.html patch · advisory pihak ketiga
• https://www.kb.cert.org/vuls/id/794544 advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3156 pemerintah AS
• http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html exploit · advisory pihak ketiga · vdb entry
• http://seclists.org/fulldisclosure/2021/Feb/42 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2021/Jan/79 exploit · mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Feb/3 exploit · mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/26/3 exploit · mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/27/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/01/27/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2021/02/15/1 exploit · mailing list · advisory pihak ketiga
• https://kc.mcafee.com/corporate/index?page=content&id=SB10348 broken link · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202101-33 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210128-0001/ advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210128-0002/ advisory pihak ketiga
• https://support.apple.com/kb/HT212177 advisory pihak ketiga
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM advisory pihak ketiga