Lucene search

CVE-2021-3156

🗓️ 26 Jan 2021 21:12:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 826 Media mentions👁 4083 Views

Sudo 1.9.5p2 off-by-one error heap-based buffer overflow CVE-2021-315

Reporter	Title	Published	Views	Family All 199
Information Security Automation	Vulristics: Beyond Microsoft Patch Tuesdays, Analyzing Arbitrary CVEs	2 Mar 202101:07	–	avleonov
ALT Linux	Security fix for the ALT Linux 8 package sudo version 1:1.9.5p2-alt0.M80P.1	6 Feb 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package sudo version 1:1.9.5p2-alt1	27 Jan 202100:00	–	altlinux
Redos	ROS-2-613	8 Sep 202100:00	–	redos
Redos	ROS-2-1217	8 Sep 202100:00	–	redos
Redos	ROS-2-795	8 Sep 202100:00	–	redos
Redos	ROS-2-438	13 Mar 202400:00	–	redos
Redos	ROS-2-1165	6 Jul 202300:00	–	redos
IBM Security Bulletins	Security Bulletin: Sudo as used by IBM QRadar SIEM is vulnerable to arbitrary code execution	12 Apr 202122:48	–	ibm
Packet Storm	Sudo 1.9.5p1 Buffer Overflow / Privilege Escalation	3 Feb 202100:00	–	packetstorm

Nvd

Node

sudo_project sudoRange1.8.2–1.8.32

sudo_project sudoRange1.9.0–1.9.5

sudo_project sudoMatch1.9.5-

sudo_project sudoMatch1.9.5patch1

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp cloud_backupMatch-

netapp hci_management_nodeMatch-

netapp oncommand_unified_manager_core_packageMatch-

netapp ontap_select_deploy_administration_utilityMatch-

netapp ontap_toolsMatch9vmware_vsphere

netapp solidfireMatch-

Node

mcafee web_gatewayMatch8.2.17

mcafee web_gatewayMatch9.2.8

mcafee web_gatewayMatch10.0.4

Node

synology diskstation_manager_unified_controllerMatch3.0

synology diskstation_managerMatch6.2

Node

synology skynas_firmwareMatch-

AND

synology skynasMatch-

Node

synology vs960hd_firmwareMatch-

AND

synology vs960hdMatch-

Node

beyondtrust privilege_management_for_macRange<21.1.1

beyondtrust privilege_management_for_unix\/linuxRange<10.3.2-10basic

Node

oracle micros_compact_workstation_3_firmwareMatch310

AND

oracle micros_compact_workstation_3Match-

Node

oracle micros_es400_firmwareRange400–410

AND

oracle micros_es400Match-

Node

oracle micros_kitchen_display_system_firmwareMatch210

AND

oracle micros_kitchen_display_systemMatch-

Node

oracle micros_workstation_5a_firmwareMatch5a

AND

oracle micros_workstation_5aMatch-

Node

oracle micros_workstation_6_firmwareRange610–655

AND

oracle micros_workstation_6Match-

Node

oracle communications_performance_intelligence_centerRange10.3.0.0.0–10.3.0.2.1

oracle communications_performance_intelligence_centerRange10.4.0.1.0–10.4.0.3.1

oracle tekelec_platform_distributionRange7.4.0–7.7.1

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/01/30/8
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/
oracle	www.oracle.com/security-alerts/cpuoct2021.html
seclists	www.seclists.org/fulldisclosure/2021/Feb/42
oracle	www.oracle.com//security-alerts/cpujul2021.html
debian	www.debian.org/security/2021/dsa-4839
openwall	www.openwall.com/lists/oss-security/2021/09/14/2
seclists	www.seclists.org/fulldisclosure/2024/Feb/3
support	www.support.apple.com/kb/HT212177
openwall	www.openwall.com/lists/oss-security/2021/01/26/3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jan 2021 21:15Current

8.3High risk

Vulners AI Score8.3

CVSS27.2

CVSS37.8

EPSS0.96365