VDB
ALINUX2-SA-2021%3A0003
ALINUX2-SA-2021%3A0003
PUBLISHED
CVSS 7 HIGH
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2021-3156: Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character:
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | sudo |
Timeline
- Jan 27, 2021 CVE Published
- Jan 27, 2021 CVE Updated
- Feb 13, 2025 PoC Published