Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
Connections 32
has cited scope1 retained · stored CVE-2021-3156 → n/a · n/afd895a15-6c4c-4781-97bf-0df7d93af6c8
has environmental constraint1 retained · stored CVE-2021-3156 → synology · skynas0d41d60a-ab39-4027-9fcb-6b788934e292
has environmental constraint1 retained · stored CVE-2021-3156 → oracle · micros_es400112ff99b-142a-468c-99c3-5fb4335d5481
has environmental constraint1 retained · stored CVE-2021-3156 → oracle · micros_kitchen_display_system4579b834-7092-43b0-af1a-89f17e41187c
has environmental constraint1 retained · stored CVE-2021-3156 → oracle · micros_compact_workstation_364efc2ca-9c05-4c1c-8a4e-0001236a18a1
has environmental constraint1 retained · stored CVE-2021-3156 → oracle · micros_workstation_6a4e3a790-7c13-4a32-9542-3ffe51d4be02
has environmental constraint1 retained · stored CVE-2021-3156 → oracle · micros_workstation_5af57a3c5f-de60-4f95-b6b6-8da07032751c
has environmental constraint1 retained · stored CVE-2021-3156 → synology · vs960hd9f43f98c-a85f-4108-94c1-1bec5c5a2b24
has vulnerable target scope1 retained · stored CVE-2021-3156 → synology · skynas_firmwareddd0d59d-b700-48cd-8d31-58db199f79b4
has vulnerable target scope1 retained · stored CVE-2021-3156 → oracle · micros_compact_workstation_3_firmware6766d01e-33fd-4592-a5af-d72166f8142f
has vulnerable target scope1 retained · stored CVE-2021-3156 → beyondtrust · privilege_management_for_maca5a7694a-b456-4437-a815-09e90afe3e16
has vulnerable target scope1 retained · stored CVE-2021-3156 → oracle · micros_workstation_6_firmware73cd4b91-f530-4bcf-885d-671d5144a4e5
has vulnerable target scope2 retained · stored CVE-2021-3156 → debian · debian_linux51da82d5-8cdd-429d-8c0b-f800cb4c16da5e3ee6bb-b120-4113-9a55-d7d262696da7
has vulnerable target scope2 retained · stored CVE-2021-3156 → oracle · communications_performance_intelligence_centerd087430c-f8ad-4167-b164-fbdf57fa890ee512381e-0902-40b2-b75a-0ffa8780aa34
has vulnerable target scope1 retained · stored CVE-2021-3156 → netapp · solidfire10371bae-18e7-4d47-aadf-8bf5d5e76418
has vulnerable target scope3 retained · stored CVE-2021-3156 → mcafee · web_gateway2e5dbc6c-2000-421c-ac61-9afdf9289cde44efeab7-6264-4ac0-90e8-af948125ee5485839482-50f8-4c10-bf3f-eaef431d6c76
has vulnerable target scope1 retained · stored CVE-2021-3156 → oracle · micros_es400_firmware0960ffb8-f7a5-43f6-8287-9961eeed5e61
has vulnerable target scope1 retained · stored CVE-2021-3156 → netapp · ontap_tools9b0195e7-04d7-4d92-9919-616393796d0e
has vulnerable target scope1 retained · stored CVE-2021-3156 → oracle · micros_workstation_5a_firmware360e9ae6-cc59-4821-87a2-2241622afc63
has vulnerable target scope1 retained · stored CVE-2021-3156 → netapp · active_iq_unified_manager1286634c-0e73-4730-bd55-ef43dc7e5476
has vulnerable target scope1 retained · stored CVE-2021-3156 → oracle · tekelec_platform_distribution332a22e0-a901-4420-969c-0c5a650417be
has vulnerable target scope1 retained · stored CVE-2021-3156 → netapp · cloud_backupbda4f9ae-fa3a-4923-bf23-730791a06d6f
has vulnerable target scope1 retained · stored CVE-2021-3156 → netapp · oncommand_unified_manager_core_packagef348e563-7e75-4f9f-8f16-f2690f4490bb
has vulnerable target scope1 retained · stored CVE-2021-3156 → synology · diskstation_managereb078d58-0bfc-4ba6-acd9-4f55cc1fee67
has vulnerable target scope1 retained · stored CVE-2021-3156 → netapp · ontap_select_deploy_administration_utility8c2e3c24-d809-4465-8f64-f0cef3d1e3dc
has vulnerable target scope1 retained · stored CVE-2021-3156 → synology · diskstation_manager_unified_controllerf2986a63-fb5e-4923-9dfe-6ae849d9d14a
has vulnerable target scope1 retained · stored CVE-2021-3156 → netapp · hci_management_node4863772a-aa6a-4b62-8707-51bbc7ab50fb
has vulnerable target scope1 retained · stored CVE-2021-3156 → oracle · micros_kitchen_display_system_firmwarecbeb008e-53ec-4a75-b234-7df835451be2
has vulnerable target scope2 retained · stored CVE-2021-3156 → fedoraproject · fedora99be40cd-e398-4808-a554-f3d5f542d847af5c7fc4-b6c3-4e11-9c55-dd3594f7a3ce
has vulnerable target scope1 retained · stored CVE-2021-3156 → synology · vs960hd_firmware147c233e-f164-4217-af2a-e0936b416cf2
has vulnerable target scope4 retained · stored CVE-2021-3156 → sudo_project · sudo22686a2b-17d2-4e6c-bf1d-3a5d6d6dbf7491a29224-996d-472a-96b8-9bd067c97940e08711e4-d631-45a2-9229-56e7fa8bae67fbc0f014-1bdf-498b-b8c5-480d1aa07e04
has vulnerable target scope1 retained · stored CVE-2021-3156 → beyondtrust · privilege_management_for_unix/linux9656f7de-7ad7-49e9-b728-cdad621d0e2a