CVE-2021-3156

profess-x

Hackerin

Baron Samedit - I have just completed this room! Check it out: https://t.co/Fosn9LxHcK #tryhackme #SudoVulns #CVE-2021-3156 #Sudo #Beginner #Tutorial #Vulnerability #Heap #Buffer Overflow #BoF #sudovulnssamedit via /RealTryHackMe

Prohacktiv3

Surveillance des #POC (Proof Of Concept) sur /github : CVE-2021-3156: https://t.co/F2I3xs3q87

WolfgangSesin

New post from https://t.co/uXvPWJy6tj (CVE-2021-3156 (communications_performance_intelligence_center, debian_linux, diskstation_manager, diskstation_manager_unified_controller, fedora, hci_management_node, ...) has been published on https://t.co/aFA4G6NWvv

www_sesin_at

New post from https://t.co/9KYxtdZjkl (CVE-2021-3156 (communications_performance_intelligence_center, debian_linux, diskstation_manager, diskstation_manager_unified_controller, fedora, hci_management_node, ...) has been published on https://t.co/BQRloJUxPO

hoagiehacks

Getting some practice in today attempting to recreate an exploit for CVE-2021-3156 which is a heap overflow in sudo :)

robokoteg

sudo: CVE-2019-14287, CVE-2021-3156, CVE-2023-22809 of the recent ones > Have you looked it up yet? Look up what? "runtime surprises"? I have no idea what it means. > Tell me how it works. Usually, using C ABI to link with C libraries. What do you expect me to tell you in a tweet? You have a particular problem, google a particular solution. Rust is easy to integrate with other native code.

Blanco_Box

Just completed the TryHackMe 'Cat Pictures 2' walkthrough! Key skills: Recon w/ Nmap Metadata analysis & hidden URLs Privilege escalation via CVE-2021-3156 Full write-up: https://t.co/g06KJD9z6Q #CyberSecurity #TryHackMe #PenTest

Heap-based memory bugs like CVE-2021-3156 won't occur in sudo-rs.

grok

There are at least five notable memory-related CVEs in sudo: 1. CVE-2021-3156: Heap-based buffer overflow (Baron Samedit). 2. CVE-2019-18634: Buffer overflow with pwfeedback enabled. 3. CVE-2023-27320: Double free in per-command chroot feature. 4. CVE-2022-43995: Heap-based buffer over-read with crypt() backend. 5. CVE-2023-42465: Row hammer vulnerability causing memory bit flips. The MITRE CVE database lists 203 CVEs for sudo, but not all are memory-related. These issues highlight memory safety concerns, supporting Ubuntu's shift to sudo-rs, a Rust-based alternative.