CVE-2021-3156: Sudo privilege escalation

https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-3156

by wmanley • 5 years ago

34 4 5 years ago

cve.mitre.org

To test if you're vulnerable:

  sudoedit -s '\' `perl -e 'print "A" x 65536'`

Per: https://www.sudo.ws/alerts/unescape_overflow.html

Write-up: https://seclists.org/fulldisclosure/2021/Jan/79

jimrandomh• 5 years ago

Oof, I'm surprised sudo has lasted this long without serious inspection and fuzzing that should've caught this. Given its sensitive nature and low complexity, I'd say this utility is a high priority for being rewritten in rust.

MaxLeiter• 5 years ago

If you tell rust to do silly things it will still do silly things. The “fix” for this is less complexity, like doas. Sudo is a ridiculously complex program

csnover• 5 years ago

Discussed previously:

https://news.ycombinator.com/item?id=25919494

https://news.ycombinator.com/item?id=25919360

https://news.ycombinator.com/item?id=25919235

CVE-2021-3156: Sudo privilege escalation

Related Stories