Every CVE Search/ Get API key

CVE-2021-3156

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...

7.8 HighIn KEVPublic exploitFix available

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

100.0%Up 35.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Record
CVE-2021-3156
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-193
Updated
2026-11-02
CVE List 7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Record
CVE-2021-3156
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-193
Updated
2026-11-02
EUVDEUVD-2021-26500 7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Record
EUVD-2021-26500
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-w5vh-2923-gp5c 7.8

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character:

Record
GHSA-w5vh-2923-gp5c
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-193, CWE-787
Updated
2026-11-02
CISA KEV No score

Sudo Heap-Based Buffer Overflow Vulnerability

Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.

Record
CVE-2021-3156
Weakness
CWE-122, CWE-193
Updated
2026-11-02
OSVALPINE-CVE-2021-3156 7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Record
ALPINE-CVE-2021-3156
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 37 moreShow less
OSVBELL-CVE-2021-3156 7.8

CVE-2021-3156 does not affect BellSoft software

Record
BELL-CVE-2021-3156
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Record
CVE-2021-3156
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-3156 7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Record
DEBIAN-CVE-2021-3156
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2021-1002 7.8

sudo security update

A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user (normal users and system users, sudoers and non-sudoers), without authentication (i.e., the attacker does not need to know the user's password). Successful exploitation of this flaw could lead to privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3156)\r\n\r\n The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.(CVE-2021-23239)\r\n\r\n selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.(CVE-2021-23240)\r\n\r\n

Record
OESA-2021-1002
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0218 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0218
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0219 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0219
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0220 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0220
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0221 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0221
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0222 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0222
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0223 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0223
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0224 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0224
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0225 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0225
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0226 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0226
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0227 7.8

Red Hat Security Advisory: sudo security update

Record
RHSA-2021:0227
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0395 7.8

Red Hat Security Advisory: RHV-H security, bug fix, enhancement update (redhat-virtualization-host) 4.3.13

Record
RHSA-2021:0395
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:0401 7.8

Red Hat Security Advisory: Red Hat Virtualization Host security bug fix and enhancement update [ovirt-4.4.4]

Record
RHSA-2021:0401
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-3156 7.8

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Record
UBUNTU-CVE-2021-3156
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2021-1611743864 No score

Fix CVE-2021-3156: Heap-based buffer overflow in sudo

Fix CVE-2021-3156: Heap-based buffer overflow in sudo.

Record
CLSA-2021-1611743864
Updated
2026-11-02
OSVCLSA-2021-1634925665 No score

Fixed CVE-2021-3156 in sudo

  • Fixed Heap-based buffer overflow in Sudo (CVE-2021-3156)
Record
CLSA-2021-1634925665
Updated
2026-11-02
OSVCLSA-2025-1748365696 No score

sudo: Fix of CVE-2021-3156

  • CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks
Record
CLSA-2025-1748365696
Updated
2026-11-02
OSVMGASA-2021-0056 No score

Updated sudo packages fix security vulnerability

A serious heap-based buffer overflow has been discovered in sudo that is exploitable by any local user. It has been given the name Baron Samedit by its discoverer. The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file. User authentication is not required to exploit the bug (CVE-2021-3156).

Record
MGASA-2021-0056
Updated
2026-11-02
OSVopenSUSE-SU-2021:0169-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
  • It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit [bsc#1180684,CVE-2021-23239]
  • A Possible Symlink Attack vector existed in sudoedit if SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240]
  • It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0169-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0170-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
  • It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit [bsc#1180684,CVE-2021-23239]
  • A Possible Symlink Attack vector existed in sudoedit if SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240]
  • It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0170-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0602-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2021:0602-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11413-1 No score

sudo-1.9.7p2-1.4 on GA media

These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11413-1
Updated
2026-11-02
OSVSUSE-SU-2021:0225-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
  • It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit [bsc#1180684,CVE-2021-23239]
  • A Possible Symlink Attack vector existed in sudoedit if SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240]
  • It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
Record
SUSE-SU-2021:0225-1
Updated
2026-11-02
OSVSUSE-SU-2021:0226-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
  • It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit [bsc#1180684,CVE-2021-23239]
  • A Possible Symlink Attack vector existed in sudoedit if SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240]
  • It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
Record
SUSE-SU-2021:0226-1
Updated
2026-11-02
OSVSUSE-SU-2021:0227-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
  • It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit [bsc#1180684,CVE-2021-23239]
  • A Possible Symlink Attack vector existed in sudoedit if SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240]
  • It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]
Record
SUSE-SU-2021:0227-1
Updated
2026-11-02
OSVSUSE-SU-2021:0232-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156]
  • It was possible for a user to test for the existence of a directory due to a Race Condition in sudoedit [bsc#1180684,CVE-2021-23239]
Record
SUSE-SU-2021:0232-1
Updated
2026-11-02
OSVSUSE-SU-2021:0928-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • Fixed a potential crash on exit as a result of the fix of CVE-2021-3156 [bsc#1181090]
Record
SUSE-SU-2021:0928-1
Updated
2026-11-02
OSVSUSE-SU-2021:1267-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
Record
SUSE-SU-2021:1267-1
Updated
2026-11-02
OSVSUSE-SU-2021:1273-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
Record
SUSE-SU-2021:1273-1
Updated
2026-11-02
OSVSUSE-SU-2021:1274-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
Record
SUSE-SU-2021:1274-1
Updated
2026-11-02
OSVSUSE-SU-2021:1275-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)
Record
SUSE-SU-2021:1275-1
Updated
2026-11-02
OSVSUSE-SU-2024:4389-1 No score

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2021-3156: Fixed regression in CVE (bsc#1234371)
Record
SUSE-SU-2024:4389-1
Updated
2026-11-02
OSVUSN-4705-1 No score

sudo vulnerabilities

It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue to obtain unintended access to the administrator account. (CVE-2021-3156)

It was discovered that the Sudo sudoedit utility incorrectly handled checking directory permissions. A local attacker could possibly use this issue to bypass file permissions and determine if a directory exists or not. (CVE-2021-23239)

Record
USN-4705-1
Updated
2026-11-02
OSVUSN-4705-2 No score

sudo vulnerability

USN-4705-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue to obtain unintended access to the administrator account. (CVE-2021-3156)

Record
USN-4705-2
Updated
2026-11-02

Affected products

Show 13 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
sudo
Alpine:v3.10
 1.8.2 up to 1.9.5p2-r0
1.9.5p2-r0
sudo
Alpine:v3.11
 1.8.2 up to 1.8.31-r1
1.8.31-r1
sudo
Alpine:v3.12
 1.8.2 up to 1.9.5p2-r0
1.9.5p2-r0
sudo
Alpine:v3.13
 1.8.2 up to 1.9.5p2-r0
1.9.5p2-r0
sudo
Alpine:v3.14
 1.8.2 up to 1.9.5p2-r0
1.9.5p2-r0
sudo
Alpine:v3.15
 1.8.2 up to 1.9.5p2-r0
1.9.5p2-r0
sudo
Alpine:v3.16
 1.8.2 up to 1.9.5p2-r0
1.9.5p2-r0
sudo
Alpine:v3.17
 1.8.2 up to 1.9.5p2-r0
1.9.5p2-r0
sudo
Alpine:v3.18
 1.8.2 up to 1.9.5p2-r0
1.9.5p2-r0
sudo
Alpine:v3.19
 1.8.2 up to 1.9.5_p2-r0
1.9.5_p2-r0
Show 152 moreShow less
Affected packages
PackageAffectedFixed
sudo
Alpine:v3.20
 1.8.2 up to 1.9.5_p2-r0
1.9.5_p2-r0
sudo
Alpine:v3.21
 1.8.2 up to 1.9.5_p2-r0
1.9.5_p2-r0
sudo
Alpine:v3.22
 1.8.2 up to 1.9.5_p2-r0
1.9.5_p2-r0
sudo
Alpine:v3.23
 1.8.2 up to 1.9.5_p2-r0
1.9.5_p2-r0
sudo
Alpine:v3.24
 1.8.2 up to 1.9.5_p2-r0
1.9.5_p2-r0
sudo
TuxCare:CentOS:6
 before 1.8.6p3-30.el6.cloudlinux.els6
1.8.6p3-30.el6.cloudlinux.els6
sudo-devel
TuxCare:CentOS:6
 before 1.8.6p3-30.el6.cloudlinux.els6
1.8.6p3-30.el6.cloudlinux.els6
sudo
TuxCare:OracleLinux:6
 before 1.8.6p3-30.el6.cloudlinux.els6
1.8.6p3-30.el6.cloudlinux.els6
sudo-devel
TuxCare:OracleLinux:6
 before 1.8.6p3-30.el6.cloudlinux.els6
1.8.6p3-30.el6.cloudlinux.els6
sudo
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 1.8.23-10.el7_9.3.tuxcare.els2
1.8.23-10.el7_9.3.tuxcare.els2
sudo-devel
TuxCare:RHEL:7
From an advisory covering 2 CVEs
 before 1.8.23-10.el7_9.3.tuxcare.els2
1.8.23-10.el7_9.3.tuxcare.els2
sudo
Debian:12
 before 1.9.5p1-1.1
1.9.5p1-1.1
sudo
Debian:13
 before 1.9.5p1-1.1
1.9.5p1-1.1
sudo
Debian:14
 before 1.9.5p1-1.1
1.9.5p1-1.1
sudo
Debian:9
 before 1.8.19p1-2.1+deb9u3, plus listed versions
1.8.19p1-2.11.8.19p1-2.1+deb9u11.8.19p1-2.1+deb9u2
1.8.19p1-2.1+deb9u3
sudo
Debian:10
 before 1.8.27-1+deb10u3, plus listed versions
1.8.27-11.8.27-1+deb10u11.8.27-1+deb10u2
1.8.27-1+deb10u3
sudo
Mageia:7
 before 1.9.5p2-1.mga7
1.9.5p2-1.mga7
sudo
openEuler:20.03-LTS
From an advisory covering 3 CVEs
 before 1.9.2-3.oe1
1.9.2-3.oe1
sudo
openEuler:20.03-LTS-SP1
From an advisory covering 3 CVEs
 before 1.9.2-3.oe1
1.9.2-3.oe1
sudo
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.29-6.el8_3.1
0:1.8.29-6.el8_3.1
sudo-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.29-6.el8_3.1
0:1.8.29-6.el8_3.1
sudo-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1.8.29-6.el8_3.1
0:1.8.29-6.el8_3.1
sudo
Red Hat:rhel_eus:8.2::baseos
 before 0:1.8.29-5.el8_2.1
0:1.8.29-5.el8_2.1
sudo-debuginfo
Red Hat:rhel_eus:8.2::baseos
 before 0:1.8.29-5.el8_2.1
0:1.8.29-5.el8_2.1
sudo-debugsource
Red Hat:rhel_eus:8.2::baseos
 before 0:1.8.29-5.el8_2.1
0:1.8.29-5.el8_2.1
sudo
Red Hat:rhel_eus:8.1::baseos
 before 0:1.8.25p1-8.el8_1.2
0:1.8.25p1-8.el8_1.2
sudo-debuginfo
Red Hat:rhel_eus:8.1::baseos
 before 0:1.8.25p1-8.el8_1.2
0:1.8.25p1-8.el8_1.2
sudo-debugsource
Red Hat:rhel_eus:8.1::baseos
 before 0:1.8.25p1-8.el8_1.2
0:1.8.25p1-8.el8_1.2
sudo
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo-devel
Red Hat:enterprise_linux:7::client
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo-devel
Red Hat:enterprise_linux:7::server
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.8.23-10.el7_9.1
0:1.8.23-10.el7_9.1
sudo
Red Hat:rhel_eus:7.7::computenode
 before 0:1.8.23-4.el7_7.3
0:1.8.23-4.el7_7.3
sudo-debuginfo
Red Hat:rhel_eus:7.7::computenode
 before 0:1.8.23-4.el7_7.3
0:1.8.23-4.el7_7.3
sudo-devel
Red Hat:rhel_eus:7.7::computenode
 before 0:1.8.23-4.el7_7.3
0:1.8.23-4.el7_7.3
sudo
Red Hat:rhel_eus:7.7::server
 before 0:1.8.23-4.el7_7.3
0:1.8.23-4.el7_7.3
sudo-debuginfo
Red Hat:rhel_eus:7.7::server
 before 0:1.8.23-4.el7_7.3
0:1.8.23-4.el7_7.3
sudo-devel
Red Hat:rhel_eus:7.7::server
 before 0:1.8.23-4.el7_7.3
0:1.8.23-4.el7_7.3
sudo
Red Hat:rhel_eus:7.6::computenode
 before 0:1.8.23-3.el7_6.2
0:1.8.23-3.el7_6.2
sudo-debuginfo
Red Hat:rhel_eus:7.6::computenode
 before 0:1.8.23-3.el7_6.2
0:1.8.23-3.el7_6.2
sudo-devel
Red Hat:rhel_eus:7.6::computenode
 before 0:1.8.23-3.el7_6.2
0:1.8.23-3.el7_6.2
sudo
Red Hat:rhel_eus:7.6::server
 before 0:1.8.23-3.el7_6.2
0:1.8.23-3.el7_6.2
sudo-debuginfo
Red Hat:rhel_eus:7.6::server
 before 0:1.8.23-3.el7_6.2
0:1.8.23-3.el7_6.2
sudo-devel
Red Hat:rhel_eus:7.6::server
 before 0:1.8.23-3.el7_6.2
0:1.8.23-3.el7_6.2
sudo
Red Hat:rhel_aus:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo-debuginfo
Red Hat:rhel_aus:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo
Red Hat:rhel_e4s:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo-debuginfo
Red Hat:rhel_e4s:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo
Red Hat:rhel_tus:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo-debuginfo
Red Hat:rhel_tus:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo-devel
Red Hat:rhel_aus:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo-devel
Red Hat:rhel_e4s:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo-devel
Red Hat:rhel_tus:7.4::server
 before 0:1.8.19p2-12.el7_4.2
0:1.8.19p2-12.el7_4.2
sudo
Red Hat:rhel_aus:7.3::server
 before 0:1.8.6p7-23.el7_3.3
0:1.8.6p7-23.el7_3.3
sudo-debuginfo
Red Hat:rhel_aus:7.3::server
 before 0:1.8.6p7-23.el7_3.3
0:1.8.6p7-23.el7_3.3
sudo-devel
Red Hat:rhel_aus:7.3::server
 before 0:1.8.6p7-23.el7_3.3
0:1.8.6p7-23.el7_3.3
sudo
Red Hat:rhel_aus:7.2::server
 before 0:1.8.6p7-17.el7_2.3
0:1.8.6p7-17.el7_2.3
sudo-debuginfo
Red Hat:rhel_aus:7.2::server
 before 0:1.8.6p7-17.el7_2.3
0:1.8.6p7-17.el7_2.3
sudo-devel
Red Hat:rhel_aus:7.2::server
 before 0:1.8.6p7-17.el7_2.3
0:1.8.6p7-17.el7_2.3
sudo
Red Hat:rhel_els:6
 before 0:1.8.6p3-29.el6_10.4
0:1.8.6p3-29.el6_10.4
sudo-debuginfo
Red Hat:rhel_els:6
 before 0:1.8.6p3-29.el6_10.4
0:1.8.6p3-29.el6_10.4
sudo-devel
Red Hat:rhel_els:6
 before 0:1.8.6p3-29.el6_10.4
0:1.8.6p3-29.el6_10.4
redhat-virtualization-host
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 4 CVEs
 before 0:4.3.13-20210127.0.el7_9
0:4.3.13-20210127.0.el7_9
redhat-virtualization-host-image-update
Red Hat:enterprise_linux:7::hypervisor
From an advisory covering 4 CVEs
 before 0:4.3.13-20210127.0.el7_9
0:4.3.13-20210127.0.el7_9
redhat-virtualization-host
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 4 CVEs
 before 0:4.4.4-20210201.0.el8_3
0:4.4.4-20210201.0.el8_3
redhat-virtualization-host-image-update
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 4 CVEs
 before 0:4.4.4-20210201.0.el8_3
0:4.4.4-20210201.0.el8_3
sudo
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 3 CVEs
 before 1.8.27-4.6.1
1.8.27-4.6.1
sudo
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 3 CVEs
 before 1.8.27-4.6.1
1.8.27-4.6.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 3 CVEs
 before 1.8.27-4.6.1
1.8.27-4.6.1
sudo
SUSE:HPE Helion OpenStack 8
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:OpenStack Cloud 8
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:OpenStack Cloud 9
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:Enterprise Storage 5
From an advisory covering 3 CVEs
 before 1.8.20p2-3.20.1
1.8.20p2-3.20.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Manager Proxy 4.0
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Manager Retail Branch Server 4.0
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Manager Server 4.0
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:Enterprise Storage 6
From an advisory covering 3 CVEs
 before 1.8.22-4.15.1
1.8.22-4.15.1
sudo
SUSE:OpenStack Cloud 7
From an advisory covering 2 CVEs
 before 1.8.10p3-10.29.1
1.8.10p3-10.29.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 2 CVEs
 before 1.8.10p3-10.29.1
1.8.10p3-10.29.1
sudo
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 2 CVEs
 before 1.8.10p3-10.29.1
1.8.10p3-10.29.1
sudo
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 2 CVEs
 before 1.8.10p3-10.29.1
1.8.10p3-10.29.1
sudo
SUSE:OpenStack Cloud 7
 before 1.8.10p3-10.32.1
1.8.10p3-10.32.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 1.8.10p3-10.32.1
1.8.10p3-10.32.1
sudo
SUSE:Linux Enterprise Server 12 SP2-LTSS
 before 1.8.10p3-10.32.1
1.8.10p3-10.32.1
sudo
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.8.10p3-10.32.1
1.8.10p3-10.32.1
sudo
SUSE:Linux Enterprise Server 12 SP2-BCL
 before 1.8.10p3-10.35.1
1.8.10p3-10.35.1
sudo
SUSE:HPE Helion OpenStack 8
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:OpenStack Cloud 8
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:OpenStack Cloud 9
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:OpenStack Cloud Crowbar 8
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:OpenStack Cloud Crowbar 9
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:Linux Enterprise Server 12 SP3-LTSS
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:Linux Enterprise Server 12 SP3-BCL
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:Linux Enterprise Server 12 SP4-LTSS
 before 1.8.20p2-3.23.1
1.8.20p2-3.23.1
sudo
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.8.27-4.15.1
1.8.27-4.15.1
sudo
SUSE:Linux Enterprise Server 12 SP5
 before 1.8.27-4.15.1
1.8.27-4.15.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.8.27-4.15.1
1.8.27-4.15.1
sudo
SUSE:Linux Enterprise Module for Basesystem 15 SP2
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise High Performance Computing 15-LTSS
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise Server 15-LTSS
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise Server 15 SP1-BCL
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Manager Proxy 4.0
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Manager Retail Branch Server 4.0
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Manager Server 4.0
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise Micro 5.0
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Enterprise Storage 6
 before 1.8.22-4.18.1
1.8.22-4.18.1
sudo
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 1.8.27-4.51.1
1.8.27-4.51.1
sudo
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 1.8.27-4.51.1
1.8.27-4.51.1
sudo
Ubuntu:Pro:14.04:LTS
 before 1.8.9p5-1ubuntu1.5+esm6, plus listed versions
1.8.6p3-0ubuntu31.8.8-2ubuntu11.8.8-2ubuntu21.8.9p4-1ubuntu11.8.9p4-1ubuntu2
Show 9 moreShow less
1.8.9p5-1ubuntu11.8.9p5-1ubuntu1.11.8.9p5-1ubuntu1.21.8.9p5-1ubuntu1.31.8.9p5-1ubuntu1.41.8.9p5-1ubuntu1.5+esm11.8.9p5-1ubuntu1.5+esm21.8.9p5-1ubuntu1.5+esm31.8.9p5-1ubuntu1.5+esm5
1.8.9p5-1ubuntu1.5+esm6
sudo
Ubuntu:16.04:LTS
 before 1.8.16-0ubuntu1.10, plus listed versions
1.8.12-1ubuntu31.8.16-0ubuntu11.8.16-0ubuntu1.11.8.16-0ubuntu1.21.8.16-0ubuntu1.3
Show 6 moreShow less
1.8.16-0ubuntu1.41.8.16-0ubuntu1.51.8.16-0ubuntu1.61.8.16-0ubuntu1.71.8.16-0ubuntu1.81.8.16-0ubuntu1.9
1.8.16-0ubuntu1.10
sudo
Ubuntu:18.04:LTS
 before 1.8.21p2-3ubuntu1.4, plus listed versions
1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.11.8.21p2-3ubuntu1.21.8.21p2-3ubuntu1.3
1.8.21p2-3ubuntu1.4
sudo
Ubuntu:20.04:LTS
 before 1.8.31-1ubuntu1.2, plus listed versions
1.8.27-1ubuntu41.8.29-1ubuntu11.8.31-1ubuntu11.8.31-1ubuntu1.1
1.8.31-1ubuntu1.2
sudo
Ubuntu:16.04:LTS
From an advisory covering 2 CVEs
 before 1.8.16-0ubuntu1.10, plus listed versions
1.8.12-1ubuntu31.8.16-0ubuntu11.8.16-0ubuntu1.11.8.16-0ubuntu1.21.8.16-0ubuntu1.3
Show 6 moreShow less
1.8.16-0ubuntu1.41.8.16-0ubuntu1.51.8.16-0ubuntu1.61.8.16-0ubuntu1.71.8.16-0ubuntu1.81.8.16-0ubuntu1.9
1.8.16-0ubuntu1.10
sudo
Ubuntu:18.04:LTS
From an advisory covering 2 CVEs
 before 1.8.21p2-3ubuntu1.4, plus listed versions
1.8.20p2-1ubuntu11.8.21p2-2ubuntu11.8.21p2-3ubuntu11.8.21p2-3ubuntu1.11.8.21p2-3ubuntu1.21.8.21p2-3ubuntu1.3
1.8.21p2-3ubuntu1.4
sudo
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 1.8.31-1ubuntu1.2, plus listed versions
1.8.27-1ubuntu41.8.29-1ubuntu11.8.31-1ubuntu11.8.31-1ubuntu1.1
1.8.31-1ubuntu1.2
sudo
openSUSE:Leap 15.1
From an advisory covering 3 CVEs
 before 1.8.22-lp151.5.12.1
1.8.22-lp151.5.12.1
sudo
openSUSE:Leap 15.2
From an advisory covering 3 CVEs
 before 1.8.22-lp152.8.6.1
1.8.22-lp152.8.6.1
sudo
openSUSE:Leap 15.2
 before 1.8.22-lp152.8.9.1
1.8.22-lp152.8.9.1
sudo
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 1.9.7p2-1.4
1.9.7p2-1.4

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitSudo Heap-Based Buffer Overflow2021-01-26
PoC in GitHubmr-r3b00t/CVE-2021-31562021-01-26
PoC in GitHubelbee-cyber/CVE-2021-3156-PATCHER2021-01-27
PoC in GitHubnexcess/sudo_cve-2021-31562021-01-27
PoC in GitHubreverse-ex/CVE-2021-31562021-01-27
PoC in GitHubunauth401/CVE-2021-31562021-01-27
PoC in GitHubymrsmns/CVE-2021-31562021-01-27
PoC in GitHubbaka9moe/CVE-2021-3156-Exp2021-01-28
PoC in GitHubkernelzeroday/CVE-2021-3156-Baron-Samedit2021-01-28
PoC in GitHubph4ntonn/CVE-2021-31562021-01-28
Show 18 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubyaunsky/cve-2021-31562021-01-28
PoC in GitHubbinw2018/CVE-2021-3156-SCRIPT2021-01-29
PoC in GitHubfreeFV/CVE-2021-31562021-01-29
PoC in GitHubmbcrump/CVE-2021-31562021-01-29
PoC in GitHubblasty/CVE-2021-31562021-01-30
PoC in GitHubnobodyatall648/CVE-2021-31562021-01-30
PoC in GitHubstong/CVE-2021-31562021-01-30
PoC in GitHubQ4n/CVE-2021-31562021-01-31
PoC in GitHubapogiatzis/docker-CVE-2021-31562021-01-31
PoC in GitHubkal1gh0st/CVE-2021-31562021-01-31
PoC in GitHubteamtopkarl/CVE-2021-31562021-01-31
PoC in GitHubAshish-dawani/CVE-2021-3156-Patch2021-02-01
PoC in GitHubSantiagoSerrao/ScannerCVE-2021-31562021-02-01
PoC in GitHubCptGibbon/CVE-2021-31562021-02-03
PoC in GitHubDanielAzulayy/CTF-20212021-02-03
Exploit-DBSudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (1)2021-02-03
Exploit-DBSudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (2)2021-02-03
PoC in GitHubdinhbaouit/CVE-2021-31562021-02-03

History

History
RecordedChangedSources
affected
exploitation
affectedOSV
exploits, exploits_more
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3156 is a high vulnerability (CVSS 7.8) in Sudo, published January 26, 2021. CISA lists it as known to be exploited, since April 6, 2022. EUVD reports exploitation since April 6, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. Fixed in sudo 1.9.5p2-r0.

References

Show 132 moreShow less
This page doesn't list everything

The full exploit list has 65 more links.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open