CVE-2021-3156

CVE-2021-3156

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via “sudoedit -s” and a command-line argument that ends with a single backslash character.

Summary:

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via “sudoedit -s” and a command-line argument that ends with a single backslash character.

Reference Links(if available):

https://www.openwall.com/lists/oss-security/2021/01/26/3

https://www.sudo.ws/stable.html#1.9.5p2

http://www.openwall.com/lists/oss-security/2021/01/26/3

https://security.gentoo.org/glsa/202101-33

https://lists.fedoraproject.org/archives/list/[email protected]/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/

CVSS Score (if available)

v2: / MEDIUMAV:L/AC:L/Au:N/C:C/I:C/A:C

v3: / HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Links to Exploits(if available)

https://github.com/offensive-security/exploitdb/blob/master/exploits/multiple/local/49521.py

https://github.com/offensive-security/exploitdb/blob/master/exploits/multiple/local/49522.c

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

[LYNX] – Ransomware Victim: Grupo_Trisan

Brute Ratel C4 Detected – 52[.]193[.]97[.]60:80

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: Oracle Releases Quarterly Critical Patch Update Advisory for October 2024

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

[LYNX] – Ransomware Victim: Grupo_Trisan

Brute Ratel C4 Detected – 52[.]193[.]97[.]60:80

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: Oracle Releases Quarterly Critical Patch Update Advisory for October 2024