Privilege Escalation

2021-01-2621:59:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.97 High

EPSS

Percentile

99.7%

JSON

sudo is vulnerable to privilege escalation. The vulnerability exists through a heap-based buffer overflow, through sudoedit -s and a command line argument ending with a \\ character.

CPENameOperatorVersion
sudo:stretcheq1.8.19p1-2.1+deb9u2
sudo:bustereq1.8.27-1+deb10u2
sudo:3.12eq1.9.0-r0
sudo:groovyeq1.9.1-1ubuntu1
sudo:xenialeq1.8.16-0ubuntu1
sudo:xenialeq1.8.16-0ubuntu1.9
sudo:bioniceq1.8.21p2-3ubuntu1
sudo:bioniceq1.8.21p2-3ubuntu1.3
sudo:bioniceq1.8.21p2-3ubuntu1.2
sudo:focaleq1.8.31-1ubuntu1

Name	Operator	Version
sudo:stretch	eq	1.8.19p1-2.1+deb9u2
sudo:buster	eq	1.8.27-1+deb10u2
sudo:3.12	eq	1.9.0-r0
sudo:groovy	eq	1.9.1-1ubuntu1
sudo:xenial	eq	1.8.16-0ubuntu1
sudo:xenial	eq	1.8.16-0ubuntu1.9
sudo:bionic	eq	1.8.21p2-3ubuntu1
sudo:bionic	eq	1.8.21p2-3ubuntu1.3
sudo:bionic	eq	1.8.21p2-3ubuntu1.2
sudo:focal	eq	1.8.31-1ubuntu1

Rows per page:

1-10 of 941

References

packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html

packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html

packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html

packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html

seclists.org/fulldisclosure/2021/Feb/42

seclists.org/fulldisclosure/2021/Jan/79

www.openwall.com/lists/oss-security/2021/01/26/3

www.openwall.com/lists/oss-security/2021/01/27/1

www.openwall.com/lists/oss-security/2021/01/27/2

www.openwall.com/lists/oss-security/2021/02/15/1

www.openwall.com/lists/oss-security/2021/09/14/2

kc.mcafee.com/corporate/index?page=content&id=SB10348

lists.debian.org/debian-lts-announce/2021/01/msg00022.html

lists.fedoraproject.org/archives/list/[email protected]/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/

lists.fedoraproject.org/archives/list/[email protected]/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/

security-tracker.debian.org/tracker/CVE-2021-3156

security.gentoo.org/glsa/202101-33

security.netapp.com/advisory/ntap-20210128-0001/

security.netapp.com/advisory/ntap-20210128-0002/

support.apple.com/kb/HT212177

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM

www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability

www.debian.org/security/2021/dsa-4839

www.kb.cert.org/vuls/id/794544

www.openwall.com/lists/oss-security/2021/01/26/3

www.oracle.com//security-alerts/cpujul2021.html

www.oracle.com/security-alerts/cpuapr2022.html

www.oracle.com/security-alerts/cpuoct2021.html

www.sudo.ws/stable.html#1.9.5p2

www.synology.com/security/advisory/Synology_SA_21_02