CVE-2021-3156

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-3156
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2021/Feb/42 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2021/Jan/79 Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2024/Feb/3 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/01/27/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/01/27/2 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/02/15/1 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/09/14/2 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/01/30/6 Exploit Mailing List
http://www.openwall.com/lists/oss-security/2024/01/30/8 Mailing List
https://kc.mcafee.com/corporate/index?page=content&id=SB10348 Broken Link Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ Mailing List Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ Mailing List Release Notes
https://security.gentoo.org/glsa/202101-33 Third Party Advisory
https://security.netapp.com/advisory/ntap-20210128-0001/ Third Party Advisory
https://security.netapp.com/advisory/ntap-20210128-0002/ Third Party Advisory
https://support.apple.com/kb/HT212177 Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM Third Party Advisory
https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability Third Party Advisory
https://www.debian.org/security/2021/dsa-4839 Third Party Advisory
https://www.kb.cert.org/vuls/id/794544 Third Party Advisory US Government Resource
https://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit Mailing List Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch Third Party Advisory
https://www.sudo.ws/stable.html#1.9.5p2 Release Notes
https://www.synology.com/security/advisory/Synology_SA_21_02 Third Party Advisory
https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156 Exploit Third Party Advisory
http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2021/Feb/42 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2021/Jan/79 Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2024/Feb/3 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/01/27/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/01/27/2 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/02/15/1 Exploit Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/09/14/2 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/01/30/6 Exploit Mailing List
http://www.openwall.com/lists/oss-security/2024/01/30/8 Mailing List
https://kc.mcafee.com/corporate/index?page=content&id=SB10348 Broken Link Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ Mailing List Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ Mailing List Release Notes
https://security.gentoo.org/glsa/202101-33 Third Party Advisory
https://security.netapp.com/advisory/ntap-20210128-0001/ Third Party Advisory
https://security.netapp.com/advisory/ntap-20210128-0002/ Third Party Advisory
https://support.apple.com/kb/HT212177 Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM Third Party Advisory
https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability Third Party Advisory
https://www.debian.org/security/2021/dsa-4839 Third Party Advisory
https://www.kb.cert.org/vuls/id/794544 Third Party Advisory US Government Resource
https://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit Mailing List Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch Third Party Advisory
https://www.sudo.ws/stable.html#1.9.5p2 Release Notes
https://www.synology.com/security/advisory/Synology_SA_21_02 Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
cpe:2.3:a:sudo_project:sudo:1.9.5:-:*:*:*:*:*:*
cpe:2.3:a:sudo_project:sudo:1.9.5:patch1:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_tools:9:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:mcafee:web_gateway:8.2.17:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:web_gateway:9.2.8:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:web_gateway:10.0.4:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*
cpe:2.3:a:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*

Configuration 9 (hide)

OR cpe:2.3:a:beyondtrust:privilege_management_for_mac:*:*:*:*:*:*:*:*
cpe:2.3:a:beyondtrust:privilege_management_for_unix\/linux:*:*:*:*:basic:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:oracle:micros_compact_workstation_3_firmware:310:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_compact_workstation_3:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:oracle:micros_es400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_es400:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:oracle:micros_kitchen_display_system_firmware:210:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_kitchen_display_system:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:oracle:micros_workstation_5a_firmware:5a:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_workstation_5a:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:oracle:micros_workstation_6_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_workstation_6:-:*:*:*:*:*:*:*

Configuration 15 (hide)

OR cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*
History

21 Nov 2024, 06:21

Type Values Removed Values Added
References () http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry
References () http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References () http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References () http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry
References () http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry
References () http://seclists.org/fulldisclosure/2021/Feb/42 - Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2021/Feb/42 - Mailing List, Third Party Advisory
References () http://seclists.org/fulldisclosure/2021/Jan/79 - Exploit, Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2021/Jan/79 - Exploit, Mailing List, Third Party Advisory
References () http://seclists.org/fulldisclosure/2024/Feb/3 - Exploit, Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2024/Feb/3 - Exploit, Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2021/01/26/3 - Exploit, Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2021/01/26/3 - Exploit, Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2021/01/27/1 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2021/01/27/1 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2021/01/27/2 - Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2021/01/27/2 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2021/02/15/1 - Exploit, Mailing List, Third Party Advisory () http://www.openwall.com/lists/oss-security/2021/02/15/1 - Exploit, Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2021/09/14/2 - Mailing List, Patch, Third Party Advisory () http://www.openwall.com/lists/oss-security/2021/09/14/2 - Mailing List, Patch, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2024/01/30/6 - Exploit, Mailing List () http://www.openwall.com/lists/oss-security/2024/01/30/6 - Exploit, Mailing List
References () http://www.openwall.com/lists/oss-security/2024/01/30/8 - Mailing List () http://www.openwall.com/lists/oss-security/2024/01/30/8 - Mailing List
References () https://kc.mcafee.com/corporate/index?page=content&id=SB10348 - Broken Link, Third Party Advisory () https://kc.mcafee.com/corporate/index?page=content&id=SB10348 - Broken Link, Third Party Advisory
References () https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html - Mailing List, Third Party Advisory () https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html - Mailing List, Third Party Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ - Mailing List, Release Notes () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ - Mailing List, Release Notes
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ - Mailing List, Release Notes () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ - Mailing List, Release Notes
References () https://security.gentoo.org/glsa/202101-33 - Third Party Advisory () https://security.gentoo.org/glsa/202101-33 - Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20210128-0001/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20210128-0001/ - Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20210128-0002/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20210128-0002/ - Third Party Advisory
References () https://support.apple.com/kb/HT212177 - Third Party Advisory () https://support.apple.com/kb/HT212177 - Third Party Advisory
References () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM - Third Party Advisory () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM - Third Party Advisory
References () https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability - Third Party Advisory () https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability - Third Party Advisory
References () https://www.debian.org/security/2021/dsa-4839 - Third Party Advisory () https://www.debian.org/security/2021/dsa-4839 - Third Party Advisory
References () https://www.kb.cert.org/vuls/id/794544 - Third Party Advisory, US Government Resource () https://www.kb.cert.org/vuls/id/794544 - Third Party Advisory, US Government Resource
References () https://www.openwall.com/lists/oss-security/2021/01/26/3 - Exploit, Mailing List, Third Party Advisory () https://www.openwall.com/lists/oss-security/2021/01/26/3 - Exploit, Mailing List, Third Party Advisory
References () https://www.oracle.com//security-alerts/cpujul2021.html - Patch, Third Party Advisory () https://www.oracle.com//security-alerts/cpujul2021.html - Patch, Third Party Advisory
References () https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory () https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory
References () https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory () https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory
References () https://www.sudo.ws/stable.html#1.9.5p2 - Release Notes () https://www.sudo.ws/stable.html#1.9.5p2 - Release Notes
References () https://www.synology.com/security/advisory/Synology_SA_21_02 - Third Party Advisory () https://www.synology.com/security/advisory/Synology_SA_21_02 - Third Party Advisory

19 Sep 2024, 19:58

Type Values Removed Values Added
References () https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156 - () https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156 - Exploit, Third Party Advisory

18 Sep 2024, 17:15

Type Values Removed Values Added
References
  • () https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156 -

09 Jul 2024, 18:27

Type Values Removed Values Added
CPE cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:ontap_tools:9:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
First Time Netapp cloud Backup
Netapp ontap Tools
Netapp active Iq Unified Manager
Netapp ontap Select Deploy Administration Utility
References () http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html - Third Party Advisory, VDB Entry () http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry
References () http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html - () http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry
References () http://seclists.org/fulldisclosure/2024/Feb/3 - () http://seclists.org/fulldisclosure/2024/Feb/3 - Exploit, Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2024/01/30/6 - () http://www.openwall.com/lists/oss-security/2024/01/30/6 - Exploit, Mailing List
References () http://www.openwall.com/lists/oss-security/2024/01/30/8 - () http://www.openwall.com/lists/oss-security/2024/01/30/8 - Mailing List
References () https://kc.mcafee.com/corporate/index?page=content&id=SB10348 - Third Party Advisory () https://kc.mcafee.com/corporate/index?page=content&id=SB10348 - Broken Link, Third Party Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ - Mailing List, Release Notes
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ - Mailing List, Release Notes
References () https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability - Patch, Third Party Advisory () https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability - Third Party Advisory
References () https://www.sudo.ws/stable.html#1.9.5p2 - Release Notes, Vendor Advisory () https://www.sudo.ws/stable.html#1.9.5p2 - Release Notes

04 Feb 2024, 09:15

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2024/Feb/3 -

31 Jan 2024, 18:15

Type Values Removed Values Added
References
  • () http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html -

30 Jan 2024, 21:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/01/30/6 -
  • () http://www.openwall.com/lists/oss-security/2024/01/30/8 -

07 Nov 2023, 03:37

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/', 'name': 'FEDORA-2021-8840cbdccd', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/', 'name': 'FEDORA-2021-2cb63d912a', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ -
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ -
Information

Published : 2021-01-26 21:15

Updated : 2024-11-21 06:21

NVD link : CVE-2021-3156

Mitre link : CVE-2021-3156

CVE.ORG link : CVE-2021-3156

JSON object : View

Products Affected

netapp

  • solidfire
  • ontap_select_deploy_administration_utility
  • ontap_tools
  • cloud_backup
  • oncommand_unified_manager_core_package
  • active_iq_unified_manager
  • hci_management_node

oracle

  • micros_workstation_5a
  • micros_kitchen_display_system_firmware
  • micros_workstation_6_firmware
  • micros_workstation_6
  • micros_compact_workstation_3_firmware
  • micros_kitchen_display_system
  • micros_compact_workstation_3
  • communications_performance_intelligence_center
  • tekelec_platform_distribution
  • micros_es400_firmware
  • micros_es400
  • micros_workstation_5a_firmware

mcafee

  • web_gateway

sudo_project

  • sudo

debian

  • debian_linux

fedoraproject

  • fedora

synology

  • diskstation_manager_unified_controller
  • vs960hd
  • skynas
  • diskstation_manager
  • vs960hd_firmware
  • skynas_firmware

beyondtrust

  • privilege_management_for_unix\/linux
  • privilege_management_for_mac
CWE
CWE-193

Off-by-one Error


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024