CVE-2021-3156 - Sudo Heap-Based Buffer Overflow Vulnerability
Project:Sudo
Product:Sudo
Date Added:2022-04-06Due Date:2022-04-27
Vulnerability Name
Sudo Heap-Based Buffer Overflow Vulnerability
Description
Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply updates per vendor instructions.
Additional Notes
https://nvd.nist.gov/vuln/detail/CVE-2021-3156
Related News Articles
CL-STA-0969 Installs Covert Malware in Telecom Networks During 10-Month Espionage CampaignAugust 3, 2025