CVE-2021-3156

Published: Jan 26, 2021Modified: Jun 17, 2026CISA KEV

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Affected (32)

Products: Sudo Project: Sudo · Fedoraproject: Fedora · Debian: Debian Linux · +5 more

Show all products

1 product

1 product

1 product

7 products

Active Iq Unified Manager

Cloud Backup

Hci Management Node

Oncommand Unified Manager Core Package

Ontap Select Deploy Administration Utility

1 product

4 products

Diskstation Manager Unified Controller

Skynas Firmware

Vs960hd Firmware

Beyondtrust

2 products

Privilege Management For Mac

Privilege Management For Unix/linux

Oracle

7 products

Micros Compact Workstation 3 Firmware

Micros Es400 Firmware

Micros Kitchen Display System Firmware

Micros Workstation 5a Firmware

Micros Workstation 6 Firmware

Communications Performance Intelligence Center

Tekelec Platform Distribution

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Sudo Project Sudo	From 1.8.2 to 1.8.32
Sudo Project Sudo	From 1.9.0 to 1.9.5
Sudo Project Sudo	Version 1.9.5
Sudo Project Sudo	Version 1.9.5 patch1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 32
Fedoraproject Fedora	Version 33

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration D

7 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Cloud Backup	All versions
Netapp Hci Management Node	All versions
Netapp Oncommand Unified Manager Core Package	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Ontap Tools	Version 9
Netapp Solidfire	All versions

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Mcafee Web Gateway	Version 10.0.4
Mcafee Web Gateway	Version 8.2.17
Mcafee Web Gateway	Version 9.2.8

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Synology Diskstation Manager	Version 6.2
Synology Diskstation Manager Unified Controller	Version 3.0

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Synology Skynas Firmware	All versions

Running on/with	Platform Versions
Synology Skynas	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Synology Vs960hd Firmware	All versions

Running on/with	Platform Versions
Synology Vs960hd	All versions

Configuration I

2 vulnerable

Vulnerable Software	Affected Versions
Beyondtrust Privilege Management For Mac	Before 21.1.1
Beyondtrust Privilege Management For Unix/linux	Before 10.3.2-10

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Micros Compact Workstation 3 Firmware	Version 310

Running on/with	Platform Versions
Oracle Micros Compact Workstation 3	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Micros Es400 Firmware	From 400 to 410

Running on/with	Platform Versions
Oracle Micros Es400	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Micros Kitchen Display System Firmware	Version 210

Running on/with	Platform Versions
Oracle Micros Kitchen Display System	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Micros Workstation 5a Firmware	Version 5a

Running on/with	Platform Versions
Oracle Micros Workstation 5a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Oracle Micros Workstation 6 Firmware	From 610 to 655

Running on/with	Platform Versions
Oracle Micros Workstation 6	All versions

Configuration O

3 vulnerable

Vulnerable Software	Affected Versions
Oracle Communications Performance Intelligence Center	From 10.3.0.0.0 to 10.3.0.2.1
Oracle Communications Performance Intelligence Center	From 10.4.0.1.0 to 10.4.0.3.1
Oracle Tekelec Platform Distribution	From 7.4.0 to 7.7.1

Related CWEs

CWE-193

Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

References (68)

http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2021/Feb/42

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Jan/79

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2024/Feb/3

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/01/26/3

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/01/27/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/01/27/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/02/15/1

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/09/14/2

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2024/01/30/6

Source: cve@mitre.org

ExploitMailing List

http://www.openwall.com/lists/oss-security/2024/01/30/8

Source: cve@mitre.org

Mailing List

https://kc.mcafee.com/corporate/index?page=content&id=SB10348

Source: cve@mitre.org

Broken LinkThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/

Source: cve@mitre.org

Mailing ListRelease Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/

Source: cve@mitre.org

Mailing ListRelease Notes

https://security.gentoo.org/glsa/202101-33

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20210128-0001/

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20210128-0002/

Source: cve@mitre.org

Third Party Advisory

https://support.apple.com/kb/HT212177

Source: cve@mitre.org

Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM

Source: cve@mitre.org

Third Party Advisory

https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2021/dsa-4839

Source: cve@mitre.org

Third Party Advisory

https://www.kb.cert.org/vuls/id/794544

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://www.openwall.com/lists/oss-security/2021/01/26/3

Source: cve@mitre.org

ExploitMailing ListThird Party Advisory

https://www.oracle.com//security-alerts/cpujul2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.sudo.ws/stable.html#1.9.5p2

Source: cve@mitre.org

Release Notes

https://www.synology.com/security/advisory/Synology_SA_21_02

Source: cve@mitre.org

Third Party Advisory

https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156

Source: cve@mitre.org

ExploitThird Party Advisory

http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html