CVEDB API

Vulnerability Details CVE-2021-3156

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.92

EPSS Ranking 99.7%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 7.2

Proposed Action

Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.

Ransomware Campaign

Unknown

References

Products affected by CVE-2021-3156

Beyondtrust » Privilege Management For Mac » Version: N/A

cpe:2.3:a:beyondtrust:privilege_management_for_mac:-
Beyondtrust » Privilege Management For Mac » Version: 4.1

cpe:2.3:a:beyondtrust:privilege_management_for_mac:4.1
Beyondtrust » Privilege Management For Mac » Version: 4.2

cpe:2.3:a:beyondtrust:privilege_management_for_mac:4.2
Beyondtrust » Privilege Management For Mac » Version: 4.5

cpe:2.3:a:beyondtrust:privilege_management_for_mac:4.5
Beyondtrust » Privilege Management For Mac » Version: 5.0

cpe:2.3:a:beyondtrust:privilege_management_for_mac:5.0
Beyondtrust » Privilege Management For Mac » Version: 5.2

cpe:2.3:a:beyondtrust:privilege_management_for_mac:5.2
Beyondtrust » Privilege Management For Mac » Version: 5.4.123

cpe:2.3:a:beyondtrust:privilege_management_for_mac:5.4.123
Beyondtrust » Privilege Management For Mac » Version: 5.5

cpe:2.3:a:beyondtrust:privilege_management_for_mac:5.5
Beyondtrust » Privilege Management For Mac » Version: 5.6

cpe:2.3:a:beyondtrust:privilege_management_for_mac:5.6
Beyondtrust » Privilege Management For Mac » Version: 5.7

cpe:2.3:a:beyondtrust:privilege_management_for_mac:5.7
Beyondtrust » Privilege Management For Unix/linux » Version: N/A

cpe:2.3:a:beyondtrust:privilege_management_for_unix/linux:-
Mcafee » Web Gateway » Version: 10.0.4

cpe:2.3:a:mcafee:web_gateway:10.0.4
Mcafee » Web Gateway » Version: 8.2.17

cpe:2.3:a:mcafee:web_gateway:8.2.17
Mcafee » Web Gateway » Version: 9.2.8

cpe:2.3:a:mcafee:web_gateway:9.2.8
Netapp » Active Iq Unified Manager » Version: N/A

cpe:2.3:a:netapp:active_iq_unified_manager:-
Netapp » Cloud Backup » Version: N/A

cpe:2.3:a:netapp:cloud_backup:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Oncommand Unified Manager Core Package » Version: N/A

cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-
Netapp » Ontap Select Deploy Administration Utility » Version: N/A

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-
Netapp » Ontap Tools » Version: 9

cpe:2.3:a:netapp:ontap_tools:9
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Oracle » Communications Performance Intelligence Center » Version: 10.3.0.0.0

cpe:2.3:a:oracle:communications_performance_intelligence_center:10.3.0.0.0
Oracle » Communications Performance Intelligence Center » Version: 10.3.0.2.1

cpe:2.3:a:oracle:communications_performance_intelligence_center:10.3.0.2.1
Oracle » Communications Performance Intelligence Center » Version: 10.4.0.1.0

cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.1.0
Oracle » Communications Performance Intelligence Center » Version: 10.4.0.2

cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.2
Oracle » Communications Performance Intelligence Center » Version: 10.4.0.3

cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.3
Oracle » Communications Performance Intelligence Center » Version: 10.4.0.3.1

cpe:2.3:a:oracle:communications_performance_intelligence_center:10.4.0.3.1
Oracle » Tekelec Platform Distribution » Version: 7.4.0

cpe:2.3:a:oracle:tekelec_platform_distribution:7.4.0
Oracle » Tekelec Platform Distribution » Version: 7.7.1

cpe:2.3:a:oracle:tekelec_platform_distribution:7.7.1
Sudo Project » Sudo » Version: 1.8.10

cpe:2.3:a:sudo_project:sudo:1.8.10
Sudo Project » Sudo » Version: 1.8.11

cpe:2.3:a:sudo_project:sudo:1.8.11
Sudo Project » Sudo » Version: 1.8.12

cpe:2.3:a:sudo_project:sudo:1.8.12
Sudo Project » Sudo » Version: 1.8.13

cpe:2.3:a:sudo_project:sudo:1.8.13
Sudo Project » Sudo » Version: 1.8.14

cpe:2.3:a:sudo_project:sudo:1.8.14
Sudo Project » Sudo » Version: 1.8.15

cpe:2.3:a:sudo_project:sudo:1.8.15
Sudo Project » Sudo » Version: 1.8.16

cpe:2.3:a:sudo_project:sudo:1.8.16
Sudo Project » Sudo » Version: 1.8.17

cpe:2.3:a:sudo_project:sudo:1.8.17
Sudo Project » Sudo » Version: 1.8.18

cpe:2.3:a:sudo_project:sudo:1.8.18
Sudo Project » Sudo » Version: 1.8.19

cpe:2.3:a:sudo_project:sudo:1.8.19
Sudo Project » Sudo » Version: 1.8.2

cpe:2.3:a:sudo_project:sudo:1.8.2
Sudo Project » Sudo » Version: 1.8.20

cpe:2.3:a:sudo_project:sudo:1.8.20
Sudo Project » Sudo » Version: 1.8.21

cpe:2.3:a:sudo_project:sudo:1.8.21
Sudo Project » Sudo » Version: 1.8.22

cpe:2.3:a:sudo_project:sudo:1.8.22
Sudo Project » Sudo » Version: 1.8.23

cpe:2.3:a:sudo_project:sudo:1.8.23
Sudo Project » Sudo » Version: 1.8.24

cpe:2.3:a:sudo_project:sudo:1.8.24
Sudo Project » Sudo » Version: 1.8.25

cpe:2.3:a:sudo_project:sudo:1.8.25
Sudo Project » Sudo » Version: 1.8.26

cpe:2.3:a:sudo_project:sudo:1.8.26
Sudo Project » Sudo » Version: 1.8.27

cpe:2.3:a:sudo_project:sudo:1.8.27
Sudo Project » Sudo » Version: 1.8.28

cpe:2.3:a:sudo_project:sudo:1.8.28
Sudo Project » Sudo » Version: 1.8.29

cpe:2.3:a:sudo_project:sudo:1.8.29
Sudo Project » Sudo » Version: 1.8.3

cpe:2.3:a:sudo_project:sudo:1.8.3
Sudo Project » Sudo » Version: 1.8.30

cpe:2.3:a:sudo_project:sudo:1.8.30
Sudo Project » Sudo » Version: 1.8.31

cpe:2.3:a:sudo_project:sudo:1.8.31
Sudo Project » Sudo » Version: 1.8.4

cpe:2.3:a:sudo_project:sudo:1.8.4
Sudo Project » Sudo » Version: 1.8.5

cpe:2.3:a:sudo_project:sudo:1.8.5
Sudo Project » Sudo » Version: 1.8.6

cpe:2.3:a:sudo_project:sudo:1.8.6
Sudo Project » Sudo » Version: 1.8.7

cpe:2.3:a:sudo_project:sudo:1.8.7
Sudo Project » Sudo » Version: 1.8.8

cpe:2.3:a:sudo_project:sudo:1.8.8
Sudo Project » Sudo » Version: 1.8.9

cpe:2.3:a:sudo_project:sudo:1.8.9
Sudo Project » Sudo » Version: 1.9.0

cpe:2.3:a:sudo_project:sudo:1.9.0
Sudo Project » Sudo » Version: 1.9.1

cpe:2.3:a:sudo_project:sudo:1.9.1
Sudo Project » Sudo » Version: 1.9.2

cpe:2.3:a:sudo_project:sudo:1.9.2
Sudo Project » Sudo » Version: 1.9.3

cpe:2.3:a:sudo_project:sudo:1.9.3
Sudo Project » Sudo » Version: 1.9.4

cpe:2.3:a:sudo_project:sudo:1.9.4
Sudo Project » Sudo » Version: 1.9.5

cpe:2.3:a:sudo_project:sudo:1.9.5
Synology » Diskstation Manager Unified Controller » Version: 3.0

cpe:2.3:a:synology:diskstation_manager_unified_controller:3.0
Oracle » Micros Compact Workstation 3 » Version: N/A

cpe:2.3:h:oracle:micros_compact_workstation_3:-
Oracle » Micros Es400 » Version: N/A

cpe:2.3:h:oracle:micros_es400:-
Oracle » Micros Kitchen Display System » Version: N/A

cpe:2.3:h:oracle:micros_kitchen_display_system:-
Oracle » Micros Workstation 5a » Version: N/A

cpe:2.3:h:oracle:micros_workstation_5a:-
Oracle » Micros Workstation 6 » Version: N/A

cpe:2.3:h:oracle:micros_workstation_6:-
Synology » Skynas » Version: N/A

cpe:2.3:h:synology:skynas:-
Synology » Vs960hd » Version: N/A

cpe:2.3:h:synology:vs960hd:-
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Oracle » Micros Compact Workstation 3 Firmware » Version: 310

cpe:2.3:o:oracle:micros_compact_workstation_3_firmware:310
Oracle » Micros Es400 Firmware » Version: 400

cpe:2.3:o:oracle:micros_es400_firmware:400
Oracle » Micros Es400 Firmware » Version: 410

cpe:2.3:o:oracle:micros_es400_firmware:410
Oracle » Micros Kitchen Display System Firmware » Version: 210

cpe:2.3:o:oracle:micros_kitchen_display_system_firmware:210
Oracle » Micros Workstation 5a Firmware » Version: 5a

cpe:2.3:o:oracle:micros_workstation_5a_firmware:5a
Oracle » Micros Workstation 6 Firmware » Version: 610

cpe:2.3:o:oracle:micros_workstation_6_firmware:610
Oracle » Micros Workstation 6 Firmware » Version: 655

cpe:2.3:o:oracle:micros_workstation_6_firmware:655
Synology » Diskstation Manager » Version: 6.2

cpe:2.3:o:synology:diskstation_manager:6.2
Synology » Skynas Firmware » Version: N/A

cpe:2.3:o:synology:skynas_firmware:-
Synology » Vs960hd Firmware » Version: N/A

cpe:2.3:o:synology:vs960hd_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-3156

Products

Pricing

Contact Us