{"id":"CVE-2021-3156","aliases":["ALPINE-CVE-2021-3156","BELL-CVE-2021-3156","CLSA-2021-1611743864","CLSA-2021-1634925665","CLSA-2025-1748365696","DEBIAN-CVE-2021-3156","DLA-2534-1","DSA-4839-1","EUVD-2021-26500","GHSA-w5vh-2923-gp5c","MGASA-2021-0056","OESA-2021-1002","RHSA-2021:0218","RHSA-2021:0219","RHSA-2021:0220","RHSA-2021:0221","RHSA-2021:0222","RHSA-2021:0223","RHSA-2021:0224","RHSA-2021:0225","RHSA-2021:0226","RHSA-2021:0227","RHSA-2021:0395","RHSA-2021:0401","SUSE-SU-2021:0225-1","SUSE-SU-2021:0226-1","SUSE-SU-2021:0227-1","SUSE-SU-2021:0232-1","SUSE-SU-2021:0928-1","SUSE-SU-2021:1267-1","SUSE-SU-2021:1273-1","SUSE-SU-2021:1274-1","SUSE-SU-2021:1275-1","SUSE-SU-2024:4389-1","UBUNTU-CVE-2021-3156","USN-4705-1","USN-4705-2","openSUSE-SU-2021:0169-1","openSUSE-SU-2021:0170-1","openSUSE-SU-2021:0602-1","openSUSE-SU-2024:11413-1"],"status":"published","title":"Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...","description":"Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.99962,"percentile":0.99975,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-122","CWE-193","CWE-787"],"published":"2021-01-26T00:00:00Z","modified":"2026-11-03T06:32:33Z","kev":{"date_added":"2022-04-06","due_date":"2022-04-27","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-04-06"},{"source":"kev","since":"2022-04-06"}],"exploits":[{"source":"metasploit","id":"exploit/linux/local/sudo_baron_samedit","title":"Sudo Heap-Based Buffer Overflow","type":"exploit","platform":"Linux,Unix","date":"2021-01-26","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/local/sudo_baron_samedit"},{"source":"pocgithub","id":"mr-r3b00t/CVE-2021-3156","title":"mr-r3b00t/CVE-2021-3156","date":"2021-01-26","url":"https://github.com/mr-r3b00t/CVE-2021-3156"},{"source":"pocgithub","id":"elbee-cyber/CVE-2021-3156-PATCHER","title":"elbee-cyber/CVE-2021-3156-PATCHER","date":"2021-01-27","url":"https://github.com/elbee-cyber/CVE-2021-3156-PATCHER"},{"source":"pocgithub","id":"nexcess/sudo_cve-2021-3156","title":"nexcess/sudo_cve-2021-3156","date":"2021-01-27","url":"https://github.com/nexcess/sudo_cve-2021-3156"},{"source":"pocgithub","id":"reverse-ex/CVE-2021-3156","title":"reverse-ex/CVE-2021-3156","date":"2021-01-27","url":"https://github.com/reverse-ex/CVE-2021-3156"},{"source":"pocgithub","id":"unauth401/CVE-2021-3156","title":"unauth401/CVE-2021-3156","date":"2021-01-27","url":"https://github.com/unauth401/CVE-2021-3156"},{"source":"pocgithub","id":"ymrsmns/CVE-2021-3156","title":"ymrsmns/CVE-2021-3156","date":"2021-01-27","url":"https://github.com/ymrsmns/CVE-2021-3156"},{"source":"pocgithub","id":"baka9moe/CVE-2021-3156-Exp","title":"baka9moe/CVE-2021-3156-Exp","date":"2021-01-28","url":"https://github.com/baka9moe/CVE-2021-3156-Exp"},{"source":"pocgithub","id":"kernelzeroday/CVE-2021-3156-Baron-Samedit","title":"kernelzeroday/CVE-2021-3156-Baron-Samedit","date":"2021-01-28","url":"https://github.com/kernelzeroday/CVE-2021-3156-Baron-Samedit"},{"source":"pocgithub","id":"ph4ntonn/CVE-2021-3156","title":"ph4ntonn/CVE-2021-3156","date":"2021-01-28","url":"https://github.com/ph4ntonn/CVE-2021-3156"},{"source":"pocgithub","id":"yaunsky/cve-2021-3156","title":"yaunsky/cve-2021-3156","date":"2021-01-28","url":"https://github.com/yaunsky/cve-2021-3156"},{"source":"pocgithub","id":"binw2018/CVE-2021-3156-SCRIPT","title":"binw2018/CVE-2021-3156-SCRIPT","date":"2021-01-29","url":"https://github.com/binw2018/CVE-2021-3156-SCRIPT"},{"source":"pocgithub","id":"freeFV/CVE-2021-3156","title":"freeFV/CVE-2021-3156","date":"2021-01-29","url":"https://github.com/freeFV/CVE-2021-3156"},{"source":"pocgithub","id":"mbcrump/CVE-2021-3156","title":"mbcrump/CVE-2021-3156","date":"2021-01-29","url":"https://github.com/mbcrump/CVE-2021-3156"},{"source":"pocgithub","id":"blasty/CVE-2021-3156","title":"blasty/CVE-2021-3156","date":"2021-01-30","url":"https://github.com/blasty/CVE-2021-3156"},{"source":"pocgithub","id":"nobodyatall648/CVE-2021-3156","title":"nobodyatall648/CVE-2021-3156","date":"2021-01-30","url":"https://github.com/nobodyatall648/CVE-2021-3156"},{"source":"pocgithub","id":"stong/CVE-2021-3156","title":"stong/CVE-2021-3156","date":"2021-01-30","url":"https://github.com/stong/CVE-2021-3156"},{"source":"pocgithub","id":"Q4n/CVE-2021-3156","title":"Q4n/CVE-2021-3156","date":"2021-01-31","url":"https://github.com/Q4n/CVE-2021-3156"},{"source":"pocgithub","id":"apogiatzis/docker-CVE-2021-3156","title":"apogiatzis/docker-CVE-2021-3156","date":"2021-01-31","url":"https://github.com/apogiatzis/docker-CVE-2021-3156"},{"source":"pocgithub","id":"kal1gh0st/CVE-2021-3156","title":"kal1gh0st/CVE-2021-3156","date":"2021-01-31","url":"https://github.com/kal1gh0st/CVE-2021-3156"},{"source":"pocgithub","id":"teamtopkarl/CVE-2021-3156","title":"teamtopkarl/CVE-2021-3156","date":"2021-01-31","url":"https://github.com/teamtopkarl/CVE-2021-3156"},{"source":"pocgithub","id":"Ashish-dawani/CVE-2021-3156-Patch","title":"Ashish-dawani/CVE-2021-3156-Patch","date":"2021-02-01","url":"https://github.com/Ashish-dawani/CVE-2021-3156-Patch"},{"source":"pocgithub","id":"SantiagoSerrao/ScannerCVE-2021-3156","title":"SantiagoSerrao/ScannerCVE-2021-3156","date":"2021-02-01","url":"https://github.com/SantiagoSerrao/ScannerCVE-2021-3156"},{"source":"pocgithub","id":"CptGibbon/CVE-2021-3156","title":"CptGibbon/CVE-2021-3156","date":"2021-02-03","url":"https://github.com/CptGibbon/CVE-2021-3156"},{"source":"pocgithub","id":"DanielAzulayy/CTF-2021","title":"DanielAzulayy/CTF-2021","date":"2021-02-03","url":"https://github.com/DanielAzulayy/CTF-2021"},{"source":"exploitdb","id":"EDB-49521","title":"Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (1)","type":"local","platform":"multiple","date":"2021-02-03","url":"https://www.exploit-db.com/exploits/49521"},{"source":"exploitdb","id":"EDB-49522","title":"Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (2)","type":"local","platform":"multiple","date":"2021-02-03","url":"https://www.exploit-db.com/exploits/49522"},{"source":"pocgithub","id":"dinhbaouit/CVE-2021-3156","title":"dinhbaouit/CVE-2021-3156","date":"2021-02-03","url":"https://github.com/dinhbaouit/CVE-2021-3156"}],"exploits_more":65,"fixes":[{"ecosystem":"Alpine:v3.10","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"sudo","fixed_in":["1.8.31-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"sudo","fixed_in":["1.9.5p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"sudo","fixed_in":["1.9.5_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"sudo","fixed_in":["1.9.5_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"sudo","fixed_in":["1.9.5_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"sudo","fixed_in":["1.9.5_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"sudo","fixed_in":["1.9.5_p2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"sudo","fixed_in":["1.9.5_p2-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"sudo","fixed_in":["1.8.6p3-30.el6.cloudlinux.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"sudo-devel","fixed_in":["1.8.6p3-30.el6.cloudlinux.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"sudo","fixed_in":["1.8.6p3-30.el6.cloudlinux.els6"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"sudo-devel","fixed_in":["1.8.6p3-30.el6.cloudlinux.els6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"sudo","fixed_in":["1.9.5p1-1.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"sudo","fixed_in":["1.9.5p1-1.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"sudo","fixed_in":["1.9.5p1-1.1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"sudo","fixed_in":["1.8.19p1-2.1+deb9u3"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"sudo","fixed_in":["1.8.27-1+deb10u3"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"sudo","fixed_in":["1.9.5p2-1.mga7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","fixed_in":["0:1.8.29-6.el8_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-6.el8_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-6.el8_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"sudo","fixed_in":["0:1.8.29-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.29-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.29-5.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"sudo","fixed_in":["0:1.8.25p1-8.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"sudo-debuginfo","fixed_in":["0:1.8.25p1-8.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"sudo-debugsource","fixed_in":["0:1.8.25p1-8.el8_1.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-debuginfo","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-devel","fixed_in":["0:1.8.23-10.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"sudo","fixed_in":["0:1.8.23-4.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-4.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.7::server","package":"sudo-devel","fixed_in":["0:1.8.23-4.el7_7.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo","fixed_in":["0:1.8.23-3.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo-debuginfo","fixed_in":["0:1.8.23-3.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo-devel","fixed_in":["0:1.8.23-3.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo","fixed_in":["0:1.8.23-3.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo-debuginfo","fixed_in":["0:1.8.23-3.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo-devel","fixed_in":["0:1.8.23-3.el7_6.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo-debuginfo","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-devel","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo-devel","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo-devel","fixed_in":["0:1.8.19p2-12.el7_4.2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo","fixed_in":["0:1.8.6p7-23.el7_3.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p7-23.el7_3.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo-devel","fixed_in":["0:1.8.6p7-23.el7_3.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo","fixed_in":["0:1.8.6p7-17.el7_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo-debuginfo","fixed_in":["0:1.8.6p7-17.el7_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo-devel","fixed_in":["0:1.8.6p7-17.el7_2.3"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"sudo","fixed_in":["0:1.8.6p3-29.el6_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"sudo-debuginfo","fixed_in":["0:1.8.6p3-29.el6_10.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"sudo-devel","fixed_in":["0:1.8.6p3-29.el6_10.4"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 7","package":"sudo","fixed_in":["1.8.10p3-10.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"sudo","fixed_in":["1.8.10p3-10.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"sudo","fixed_in":["1.8.10p3-10.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","fixed_in":["1.8.10p3-10.32.1","1.8.10p3-10.35.1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"sudo","fixed_in":["1.8.20p2-3.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"sudo","fixed_in":["1.8.27-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"sudo","fixed_in":["1.8.27-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"sudo","fixed_in":["1.8.27-4.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.0","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.0","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"sudo","fixed_in":["1.8.22-4.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"sudo","fixed_in":["1.8.27-4.51.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"sudo","fixed_in":["1.8.27-4.51.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","fixed_in":["1.8.9p5-1ubuntu1.5+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"sudo","fixed_in":["1.8.16-0ubuntu1.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"sudo","fixed_in":["1.8.21p2-3ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"sudo","fixed_in":["1.8.31-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"sudo","fixed_in":["1.8.22-lp152.8.9.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.8.31-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5_p2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.9.5_p2-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-30.el6.cloudlinux.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-30.el6.cloudlinux.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-30.el6.cloudlinux.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.6p3-30.el6.cloudlinux.els6"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.el7_9.3.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p1-1.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p1-1.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p1-1.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.19p1-2.1+deb9u3"}]}],"versions":["1.8.19p1-2.1","1.8.19p1-2.1+deb9u1","1.8.19p1-2.1+deb9u2"]},{"source":"osv","ecosystem":"Debian:10","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-1+deb10u3"}]}],"versions":["1.8.27-1","1.8.27-1+deb10u1","1.8.27-1+deb10u2"]},{"source":"osv","ecosystem":"Mageia:7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.5p2-1.mga7"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-3.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-3.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-6.el8_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-6.el8_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-6.el8_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.29-5.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::baseos","package":"sudo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.25p1-8.el8_1.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-10.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.7::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-4.el7_7.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::computenode","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:7.6::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.23-3.el7_6.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.4::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:7.4::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:7.4::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.19p2-12.el7_4.2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.3::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-23.el7_3.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:7.2::server","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p7-17.el7_2.3"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"sudo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"sudo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.6p3-29.el6_10.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.13-20210127.0.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.13-20210127.0.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.4-20210201.0.el8_3"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"redhat-virtualization-host-image-update","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.4-20210201.0.el8_3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.20.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.10p3-10.35.1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.20p2-3.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-4.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.51.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.27-4.51.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9p5-1ubuntu1.5+esm6"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.10"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7","1.8.16-0ubuntu1.8","1.8.16-0ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.4"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1","1.8.21p2-3ubuntu1.1","1.8.21p2-3ubuntu1.2","1.8.21p2-3ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.2"}]}],"versions":["1.8.27-1ubuntu4","1.8.29-1ubuntu1","1.8.31-1ubuntu1","1.8.31-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.16-0ubuntu1.10"}]}],"versions":["1.8.12-1ubuntu3","1.8.16-0ubuntu1","1.8.16-0ubuntu1.1","1.8.16-0ubuntu1.2","1.8.16-0ubuntu1.3","1.8.16-0ubuntu1.4","1.8.16-0ubuntu1.5","1.8.16-0ubuntu1.6","1.8.16-0ubuntu1.7","1.8.16-0ubuntu1.8","1.8.16-0ubuntu1.9"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.21p2-3ubuntu1.4"}]}],"versions":["1.8.20p2-1ubuntu1","1.8.21p2-2ubuntu1","1.8.21p2-3ubuntu1","1.8.21p2-3ubuntu1.1","1.8.21p2-3ubuntu1.2","1.8.21p2-3ubuntu1.3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.31-1ubuntu1.2"}]}],"versions":["1.8.27-1ubuntu4","1.8.29-1ubuntu1","1.8.31-1ubuntu1","1.8.31-1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.9p5-1ubuntu1.5+esm6"}]}],"versions":["1.8.6p3-0ubuntu3","1.8.8-2ubuntu1","1.8.8-2ubuntu2","1.8.9p4-1ubuntu1","1.8.9p4-1ubuntu2","1.8.9p5-1ubuntu1","1.8.9p5-1ubuntu1.1","1.8.9p5-1ubuntu1.2","1.8.9p5-1ubuntu1.3","1.8.9p5-1ubuntu1.4","1.8.9p5-1ubuntu1.5+esm1","1.8.9p5-1ubuntu1.5+esm2","1.8.9p5-1ubuntu1.5+esm3","1.8.9p5-1ubuntu1.5+esm5"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-lp151.5.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-lp152.8.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.22-lp152.8.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"sudo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7p2-1.4"}]}],"bundled":11}],"products":[{"vendor":"beyondtrust","product":"privilege_management_for_mac"},{"vendor":"beyondtrust","product":"privilege_management_for_unix\\/linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"mcafee","product":"web_gateway"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_backup"},{"vendor":"netapp","product":"hci_management_node"},{"vendor":"netapp","product":"oncommand_unified_manager_core_package"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"netapp","product":"ontap_tools"},{"vendor":"netapp","product":"solidfire"},{"vendor":"oracle","product":"communications_performance_intelligence_center"},{"vendor":"oracle","product":"micros_compact_workstation_3_firmware"},{"vendor":"oracle","product":"micros_es400_firmware"},{"vendor":"oracle","product":"micros_kitchen_display_system_firmware"},{"vendor":"oracle","product":"micros_workstation_5a_firmware"},{"vendor":"oracle","product":"micros_workstation_6_firmware"},{"vendor":"oracle","product":"tekelec_platform_distribution"},{"vendor":"sudo","product":"sudo"},{"vendor":"sudo_project","product":"sudo"},{"vendor":"synology","product":"diskstation_manager"},{"vendor":"synology","product":"diskstation_manager_unified_controller"},{"vendor":"synology","product":"skynas_firmware"},{"vendor":"synology","product":"vs960hd_firmware"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Jan/79","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"http://www.openwall.com/lists/oss-security/2021/01/26/3","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"https://security.gentoo.org/glsa/202101-33","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4839","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/","tags":["vendor-advisory","x_transferred","Mailing List","Release Notes","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/","tags":["vendor-advisory","x_transferred","Mailing List","Release Notes","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/01/27/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/01/27/2","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.kb.cert.org/vuls/id/794544","tags":["third-party-advisory","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Feb/42","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/02/15/1","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.sudo.ws/stable.html#1.9.5p2","tags":["x_transferred","Release Notes","advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2021/01/26/3","tags":["x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://security.netapp.com/advisory/ntap-20210128-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210128-0001/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://support.apple.com/kb/HT212177","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10348","tags":["x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_21_02","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2021/09/14/2","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/8","tags":["mailing-list","x_transferred","Mailing List","article"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/30/6","tags":["mailing-list","x_transferred","Exploit","Mailing List","evidence"]},{"url":"http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"http://seclists.org/fulldisclosure/2024/Feb/3","tags":["mailing-list","x_transferred","Exploit","Mailing List","Third Party Advisory","evidence"]},{"url":"https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156","tags":["Exploit","Third Party Advisory","evidence"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3156","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3156","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210128-0002"},{"url":"https://security.netapp.com/advisory/ntap-20210128-0001"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII"},{"url":"https://github.com/advisories/GHSA-w5vh-2923-gp5c"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-3156","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2021-3156","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2021-1611743864.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2021-1634925665.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1748365696.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3156","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0056.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28230","tags":["report"]},{"url":"https://www.sudo.ws/alerts/unescape_overflow.html","tags":["web","article"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23239","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23240","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0218","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-002","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1917684","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0218.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3156","tags":["advisory","report"]},{"url":"https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article","report"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0219","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0219.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0220","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0220.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0221","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0221.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0222","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0222.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0223","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0223.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0224","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0224.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0225","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0225.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0226","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0226.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0227","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0227.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0395","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-001","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1889688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1890125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1916111","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0395.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25684","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25684","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25684","tags":["advisory"]},{"url":"https://www.jsof-tech.com/disclosures/dnspooq/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25685","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25685","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-25686","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-25686","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-25686","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0401","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1902646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1909644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923126","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0401.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210225-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1180684","tags":["report"]},{"url":"https://bugzilla.suse.com/1180685","tags":["report"]},{"url":"https://bugzilla.suse.com/1180687","tags":["report"]},{"url":"https://bugzilla.suse.com/1181090","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3156","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210226-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210227-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210232-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210928-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211267-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1183936","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211273-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211274-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211275-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244389-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234371","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3156","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4705-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4705-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-23239","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7OQJUG5Z7K425IKZS5GT4KPIBGTT4JMW/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3O463OUKAXLCUM74AUHUPVMQFXLLVAEH/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTRDPRKO2NDRVSH5UJJKLBDYJXGUBK6P/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-4158","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9680","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18634","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-3156","description":"Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","status":"published","published":"2021-01-26T00:00:00Z","modified":"2025-10-21T23:35:29.6Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-193"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-26500","description":"Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","status":"published","published":"2021-01-26T00:00:00Z","modified":"2025-10-21T23:35:29Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2022-04-06","updated_at":"2026-11-02T20:31:25.308373Z"}],"ghsa":[{"id":"GHSA-w5vh-2923-gp5c","title":"Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ...","description":"Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character:","status":"published","published":"2022-05-24T17:40:22Z","modified":"2025-10-22T00:33:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-193","CWE-787"],"updated_at":"2026-11-02T15:04:07.67458Z"}],"kev":[{"id":"CVE-2021-3156","title":"Sudo Heap-Based Buffer Overflow Vulnerability","description":"Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.","cwes":["CWE-122","CWE-193"],"kev":{"date_added":"2022-04-06","due_date":"2022-04-27","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2021-3156","description":"Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","status":"published","published":"2021-01-26T21:15:12.987Z","modified":"2026-06-17T04:04:45.83Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-193"],"updated_at":"2026-11-02T14:06:49.660551Z"}],"osv":[{"id":"ALPINE-CVE-2021-3156","description":"Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","status":"published","published":"2021-01-26T21:15:12.987Z","modified":"2026-11-03T06:32:33.396932411Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"BELL-CVE-2021-3156","title":"CVE-2021-3156 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:47.42203Z","modified":"2026-01-26T09:49:39.517858Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2021-3156","description":"Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","status":"published","published":"2021-01-26T21:15:12.987Z","modified":"2026-10-24T10:31:06.315367815Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:19.483607Z"},{"id":"DEBIAN-CVE-2021-3156","description":"Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","status":"published","published":"2021-01-26T21:15:12.987Z","modified":"2026-10-23T18:03:14.076812847Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.94143Z"},{"id":"OESA-2021-1002","title":"sudo security update","description":"A flaw was found in sudo. A heap-based buffer overflow was found in the way sudo parses command line arguments. This flaw is exploitable by any local user (normal users and system users, sudoers and non-sudoers), without authentication (i.e., the attacker does not need to know the user's password). Successful exploitation of this flaw could lead to privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.(CVE-2021-3156)\\r\\n\\r\\n\nThe sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.(CVE-2021-23239)\\r\\n\\r\\n\nselinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable.(CVE-2021-23240)\\r\\n\\r\\n\n","status":"published","published":"2021-01-28T11:04:13Z","modified":"2026-08-18T01:15:04.616378228Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:0218","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:24:37Z","modified":"2026-06-29T10:33:45Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0219","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:24:43Z","modified":"2026-06-29T10:33:46Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0220","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:24:50Z","modified":"2026-06-29T10:33:46Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0221","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:24:57Z","modified":"2026-06-29T10:33:47Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0222","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:25:04Z","modified":"2026-06-29T10:33:48Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0223","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:25:12Z","modified":"2026-06-29T10:33:48Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0224","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:24:05Z","modified":"2026-06-29T10:33:49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0225","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:24:12Z","modified":"2026-06-29T10:33:49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0226","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:24:19Z","modified":"2026-06-29T10:33:50Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0227","title":"Red Hat Security Advisory: sudo security update","status":"published","published":"2024-09-13T20:24:26Z","modified":"2026-06-29T10:33:50Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0395","title":"Red Hat Security Advisory: RHV-H security, bug fix, enhancement update (redhat-virtualization-host) 4.3.13","status":"published","published":"2024-09-29T17:51:54Z","modified":"2026-06-29T10:33:58Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0401","title":"Red Hat Security Advisory: Red Hat Virtualization Host security bug fix and enhancement update [ovirt-4.4.4]","status":"published","published":"2025-08-04T10:19:17Z","modified":"2026-06-29T10:33:59Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"UBUNTU-CVE-2021-3156","description":"Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","status":"published","published":"2021-01-26T18:00:00Z","modified":"2026-02-04T03:55:02.249874Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:27.332852Z"},{"id":"CLSA-2021-1611743864","title":"Fix CVE-2021-3156: Heap-based buffer overflow in sudo","description":"Fix CVE-2021-3156: Heap-based buffer overflow in sudo.","status":"published","published":"2021-01-27T12:30:00Z","modified":"2026-06-01T00:33:14.738078723Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2021-1634925665","title":"Fixed CVE-2021-3156 in sudo","description":"- Fixed Heap-based buffer overflow in Sudo (CVE-2021-3156)","status":"published","published":"2021-10-22T18:01:05Z","modified":"2026-06-01T00:31:42.280076209Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2025-1748365696","title":"sudo: Fix of CVE-2021-3156","description":"- CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks","status":"published","published":"2026-06-24T16:17:32Z","modified":"2026-10-26T09:43:37.464264139Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DLA-2534-1","title":"sudo - security update","status":"published","published":"2021-01-26T00:00:00Z","modified":"2026-03-09T01:23:29.712685Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4839-1","title":"sudo - security update","status":"published","published":"2021-01-26T00:00:00Z","modified":"2026-03-09T02:09:02.965163Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0056","title":"Updated sudo packages fix security vulnerability","description":"A serious heap-based buffer overflow has been discovered in sudo that is\nexploitable by any local user. It has been given the name Baron Samedit\nby its discoverer. The bug can be leveraged to elevate privileges to\nroot, even if the user is not listed in the sudoers file. User\nauthentication is not required to exploit the bug (CVE-2021-3156). \n","status":"published","published":"2021-01-27T00:40:21Z","modified":"2026-04-16T04:41:47.821380182Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2021:0169-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-27T07:24:44Z","modified":"2026-02-04T04:39:48.293495Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0170-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-01-27T07:25:26Z","modified":"2026-02-04T02:51:35.187249Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2021:0602-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2021-04-23T10:46:47Z","modified":"2026-02-04T03:53:59.781325Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2024:11413-1","title":"sudo-1.9.7p2-1.4 on GA media","description":"These are all security issues fixed in the sudo-1.9.7p2-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:46:24.949279Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2021:0225-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n","status":"published","published":"2021-01-26T18:20:20Z","modified":"2026-02-04T02:56:09.516103Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0226-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n","status":"published","published":"2021-01-26T18:21:06Z","modified":"2026-02-04T03:26:29.23007Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0227-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n- A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685,\n  CVE-2021-23240]\n- It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687]\n","status":"published","published":"2021-01-26T18:23:08Z","modified":"2026-02-04T02:26:21.838032Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0232-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges \n  [bsc#1181090,CVE-2021-3156]\n- It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit`\n  [bsc#1180684,CVE-2021-23239]\n  ","status":"published","published":"2021-01-27T09:29:32Z","modified":"2025-05-02T04:10:34.358538Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:0928-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- Fixed a potential crash on exit as a result of the fix of CVE-2021-3156 [bsc#1181090]\n","status":"published","published":"2021-03-24T11:06:27Z","modified":"2026-02-04T04:37:01.87443Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:1267-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)\n","status":"published","published":"2021-04-20T08:54:52Z","modified":"2026-02-04T02:46:42.290587Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1273-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)\n","status":"published","published":"2021-04-20T12:29:42Z","modified":"2026-02-04T02:38:04.662297Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1274-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)\n","status":"published","published":"2021-04-20T12:29:59Z","modified":"2026-02-04T04:13:55.550121Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2021:1275-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n- L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 (bsc#1183936)\n","status":"published","published":"2021-04-20T12:32:02Z","modified":"2026-02-04T04:34:32.404156Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2024:4389-1","title":"Security update for sudo","description":"This update for sudo fixes the following issues:\n\n  - CVE-2021-3156: Fixed regression in CVE (bsc#1234371)\n\n","status":"published","published":"2024-12-20T09:06:16Z","modified":"2025-05-02T04:31:25.798981Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"USN-4705-1","title":"sudo vulnerabilities","description":"It was discovered that Sudo incorrectly handled memory when parsing command\nlines. A local attacker could possibly use this issue to obtain unintended\naccess to the administrator account. (CVE-2021-3156)\n\nIt was discovered that the Sudo sudoedit utility incorrectly handled\nchecking directory permissions. A local attacker could possibly use this\nissue to bypass file permissions and determine if a directory exists or\nnot.  (CVE-2021-23239)\n","status":"published","published":"2021-01-26T18:48:16Z","modified":"2026-04-27T16:03:35.496549186Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4705-2","title":"sudo vulnerability","description":"USN-4705-1 fixed a vulnerability in Sudo. This update provides\nthe corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that Sudo incorrectly handled memory when parsing command\n lines. A local attacker could possibly use this issue to obtain unintended\n access to the administrator account. (CVE-2021-3156)\n","status":"published","published":"2021-01-27T15:01:20Z","modified":"2026-02-10T04:42:02Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}