Lucene search
PhotonPHSA-2021-0315HistoryJan 29, 2021 - 12:00 a.m.
Important Photon OS Security Update - PHSA-2021-0315
2021-01-2900:00:00
github.com
22
photon os
security update
phsa-2021-0315
glibc
sudo
unix
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.96
Percentile
99.5%
Updates of [‘glibc’, ‘sudo’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 2.0 | x86_64 | glibc-lang | < 2.26-20.ph2 | glibc-lang-2.26-20.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | glibc-tools | < 2.26-20.ph2 | glibc-tools-2.26-20.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | glibc-devel | < 2.26-20.ph2 | glibc-devel-2.26-20.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | glibc-iconv | < 2.26-20.ph2 | glibc-iconv-2.26-20.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | glibc-nscd | < 2.26-20.ph2 | glibc-nscd-2.26-20.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | glibc-i18n | < 2.26-20.ph2 | glibc-i18n-2.26-20.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | sudo | < 1.9.5-2.ph2 | sudo-1.9.5-2.ph2.x86_64.rpm |
| Photon | 2.0 | x86_64 | glibc | < 2.26-20.ph2 | glibc-2.26-20.ph2.x86_64.rpm |
Related
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-2.0-0315
2021-01-28 00:00:00
Moderate Photon OS Security Update - PHSA-2021-3.0-0189
2021-01-28 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0188
2021-01-27 00:00:00
ubuntucve
ubuntucve
CVE-2019-25013
2021-01-04 00:00:00
CVE-2021-3156
2021-01-26 00:00:00
nessus
nessus
F5 Networks BIG-IP : glibc vulnerability (K68251873)
2021-10-28 00:00:00
Photon OS 2.0: Glibc PHSA-2021-2.0-0315
2021-01-29 00:00:00
Photon OS 1.0: Glibc PHSA-2021-1.0-0354
2021-01-20 00:00:00
cvelist
cvelist
CVE-2019-25013
2021-01-04 00:00:00
osv
osv
CVE-2019-25013
2021-01-04 18:15:13
sudo vulnerability
2021-01-27 15:01:20
CVE-2021-3156
2021-01-26 21:15:12
openvas
openvas
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2021-1299)
2021-02-22 00:00:00
Fedora: Security Advisory for glibc (FEDORA-2021-6feb090c97)
2021-01-18 00:00:00
Debian: Security Advisory (DLA-2534-1)
2021-01-27 00:00:00
nvd
nvd
CVE-2019-25013
2021-01-04 18:15:13
CVE-2021-3156
2021-01-26 21:15:12
amazon
amazon
Important: glibc
2021-02-17 18:03:00
Important: sudo
2021-01-25 23:09:00
Important: sudo
2021-01-26 00:11:00
debiancve
debiancve
CVE-2019-25013
2021-01-04 18:15:13
redhatcve
redhatcve
CVE-2019-25013
2021-01-05 22:30:36
CVE-2021-3156
2021-01-26 19:51:28
veracode
veracode
Buffer Overflow
2021-02-05 03:21:05
Privilege Escalation
2021-01-26 21:59:42
cve
cve
CVE-2019-25013
2021-01-04 18:15:13
CVE-2021-3156
2021-01-26 21:15:12
f5
f5
K68251873 : glibc vulnerability CVE-2019-25013
2021-03-10 00:00:00
K86488846 : Sudo vulnerability CVE-2021-3156
2021-01-29 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: glibc-2.32-3.fc33
2021-01-18 01:35:42
[SECURITY] Fedora 32 Update: sudo-1.9.5p2-1.fc32
2021-01-27 04:12:23
[SECURITY] Fedora 33 Update: sudo-1.9.5p2-1.fc33
2021-01-27 01:19:48
cbl_mariner
cbl_mariner
CVE-2019-25013 affecting package glibc 2.28-24
2021-01-29 07:39:27
prion
prion
Buffer overflow
2021-01-04 18:15:00
githubexploit
githubexploit
Exploit for Off-by-one Error in Sudo Project Sudo
2022-03-04 13:06:51
Exploit for Off-by-one Error in Sudo Project Sudo
2021-01-28 02:20:24
Exploit for Off-by-one Error in Sudo Project Sudo
2023-09-05 14:06:26
oraclelinux
oraclelinux
sudo security update
2021-01-27 00:00:00
sudo security update
2021-01-27 00:00:00
sudo security update
2021-01-27 00:00:00
virtuozzo
virtuozzo
cert
cert
Sudo set_cmd() is vulnerable to heap-based buffer overflow
2021-02-04 00:00:00
almalinux
almalinux
Important: sudo security update
2021-01-26 18:53:36
cisco
cisco
alpinelinux
alpinelinux
CVE-2021-3156
2021-01-26 21:15:12
paloalto
paloalto
Informational: Impact of Sudo Vulnerability CVE-2021-3156
2021-02-10 17:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-02-05 19:30:43
ics
ics
Johnson Controls Sensormatic Electronics Illustra
2021-09-02 12:00:00
Johnson Controls Sensormatic Tyco AI
2021-05-13 12:00:00
Johnson Controls Sensormatic Electronics VideoEdge
2021-05-27 12:00:00
metasploit
metasploit
Sudo Heap-Based Buffer Overflow
2021-02-04 14:25:40
centos
centos
sudo security update
2021-01-27 00:11:23
redhat
redhat
(RHSA-2021:0218) Important: sudo security update
2021-01-26 18:53:36
(RHSA-2021:0222) Important: sudo security update
2021-01-26 18:59:36
(RHSA-2021:0226) Important: sudo security update
2021-01-26 18:56:10
cisa
cisa
Sudo Heap-Based Buffer Overflow Vulnerability — CVE-2021-3156
2021-02-02 00:00:00
packetstorm
packetstorm
Sudo Buffer Overflow / Privilege Escalation
2021-02-01 00:00:00
Sudo 1.9.5p1 Buffer Overflow / Privilege Escalation
2021-02-03 00:00:00
Sudo Heap-Based Buffer Overflow
2021-01-27 00:00:00
ubuntu
ubuntu
Sudo vulnerability
2021-01-27 00:00:00
avleonov
avleonov
Vulristics: Beyond Microsoft Patch Tuesdays, Analyzing Arbitrary CVEs
2021-03-02 01:07:00
zdt
zdt
Sudo 1.9.5p1 - (Baron Samedit) Heap-Based Buffer Overflow Privilege Escalation Exploit (1)
2021-02-01 00:00:00
Sudo 1.8.31p2 / 1.9.5p1 Buffer Overflow Exploit
2021-02-05 00:00:00
redos
redos
ibm
ibm
altlinux
altlinux
Security fix for the ALT Linux 8 package sudo version 1:1.9.5p2-alt0.M80P.1
2021-02-06 00:00:00
Security fix for the ALT Linux 8 package sudo version 1:1.9.5p2-alt1
2021-01-27 00:00:00
cloudlinux
cloudlinux
Fix CVE-2021-3156: Heap-based buffer overflow in sudo
2021-01-27 12:30:00
suse
suse
Security update for sudo (important)
2021-04-23 00:00:00
debian
debian
[SECURITY] [DSA 4839-1] sudo security update
2021-01-26 18:05:33
[SECURITY] [DSA 4839-1] sudo security update
2021-01-26 18:05:33
cisa_kev
cisa_kev
Sudo Heap-Based Buffer Overflow Vulnerability
2022-04-06 00:00:00
qualysblog
qualysblog
CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)
2021-01-26 18:09:09
Qualys Research Wins Two 2021 Pwnie Awards
2021-08-05 01:44:02
threatpost
threatpost
HPE Warns Sudo Bug Gives Attackers Root Privileges to Aruba Platform
2021-08-30 21:46:56
Sudo Bug Gives Root Access to Mass Numbers of Linux Systems
2021-01-27 19:16:41
checkpoint_security
checkpoint_security
Check Point CVE-2021-3156 (sudo Privilege Escalation)
2021-01-28 08:21:18
mageia
mageia
Updated sudo packages fix security vulnerability
2021-01-27 03:40:21
huawei
huawei
Security Advisory - Sudo Privilege Escalation Vulnerability
2021-03-10 00:00:00
exploitdb
exploitdb
freebsd
freebsd
sudo -- Multiple vulnerabilities
2021-01-26 00:00:00
slackware
slackware
[slackware-security] sudo
2021-01-26 21:34:51
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.96
Percentile
99.5%
Related for PHSA-2021-0315