CVE-2021-3156highbajo ataqueCWE-193

CVE-2021-3156

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Sudo+ Monitorear sudo

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 7.8epss 100%
de la publicación al armael mismo día
Publicada en NVD26 ene
1ª PoC26 ene
metasploit26 ene
CISA KEV+435d
Lo que declaran los fabricantes (VEX)

Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.

Red Hatdocumento VEX ↗
Corregido
35 productos (211 componentes)
Red Hat Enterprise Linux Server Optional (v. 7) · Red Hat Enterprise Linux Server Optional EUS (v. 7.6) · Red Hat Enterprise Linux Server Optional EUS (v. 7.7) · Red Hat Enterprise Linux BaseOS (v. 8) · Red Hat Enterprise Linux BaseOS EUS (v. 8.1) · y otros 30
corrección ↗
No afectado
6 productos (106 componentes) — porque el código vulnerable no está presente en el producto
Red Hat Virtualization 4 Hypervisor for RHEL 8 · Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts · RHEL 8-based RHEV-H for RHEV 4 (build requirements) · RHEL 7-based RHEV-H for RHEV 4 (build requirements) · Red Hat Enterprise Linux 9 · y otros 1
Acción exigida por CISAplazo federal: 2022-04-27

Apply updates per vendor instructions.

En resumen

Sudo contiene un defecto que permite a un usuario local obtener acceso de root mediante un comando sudoedit especialmente diseñado que termina con una barra invertida. Afecta versiones antiguas de Sudo y compromete la seguridad del sistema.

Detalle técnico

Un error off-by-one en Sudo anterior a la versión 1.9.5p2 causa desbordamiento de búfer basado en heap al procesar sudoedit con la bandera -s y argumentos terminados en barra invertida. Permite escalación de privilegios local a root; requiere que sudoedit esté disponible para el usuario.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/a
PoCs públicas encontradas — 182
exploitdbwww.exploit-db.com/exploits/49522no verificadoexploitdbwww.exploit-db.com/exploits/49521no verificadogithubgithub.com/blasty/CVE-2021-3156★ 1032githubgithub.com/worawit/CVE-2021-3156★ 812githubgithub.com/stong/CVE-2021-3156★ 429githubgithub.com/LiveOverflow/pwnedit★ 226githubgithub.com/Rvn0xsy/CVE-2021-3156-plus★ 204githubgithub.com/CptGibbon/CVE-2021-3156★ 158githubgithub.com/reverse-ex/CVE-2021-3156★ 112githubgithub.com/0x4ndy/clif★ 100githubgithub.com/0xdevil/CVE-2021-3156★ 51githubgithub.com/mbcrump/CVE-2021-3156★ 38githubgithub.com/mr-r3b00t/CVE-2021-3156★ 35githubgithub.com/PhuketIsland/CVE-2021-3156-centos7★ 30githubgithub.com/kernelzeroday/CVE-2021-3156-Baron-Samedit★ 18githubgithub.com/redhawkeye/sudo-exploit★ 17githubgithub.com/jm33-m0/CVE-2021-3156★ 16githubgithub.com/chenaotian/CVE-2021-3156★ 10githubgithub.com/Maalfer/Sudo-CVE-2021-3156★ 8githubgithub.com/teamtopkarl/CVE-2021-3156★ 7githubgithub.com/apogiatzis/docker-CVE-2021-3156★ 7githubgithub.com/1N53C/CVE-2021-3156-PoC★ 7githubgithub.com/PurpleOzone/PE_CVE-CVE-2021-3156★ 7githubgithub.com/Mhackiori/CVE-2021-3156★ 5githubgithub.com/yaunsky/cve-2021-3156★ 5githubgithub.com/dinhbaouit/CVE-2021-3156★ 5githubgithub.com/baka9moe/CVE-2021-3156-Exp★ 4githubgithub.com/lmol/CVE-2021-3156★ 4githubgithub.com/kal1gh0st/CVE-2021-3156★ 3githubgithub.com/elbee-cyber/CVE-2021-3156-PATCHER★ 3githubgithub.com/ph4ntonn/CVE-2021-3156★ 3githubgithub.com/lypd0/CVE-2021-3156-checker★ 2githubgithub.com/musergi/CVE-2021-3156★ 2githubgithub.com/Q4n/CVE-2021-3156★ 2githubgithub.com/TheLeopard65/CVE-2021-3156-Baron-Samedit★ 2githubgithub.com/ypl6/heaplens★ 2githubgithub.com/unauth401/CVE-2021-3156★ 1githubgithub.com/BearCat4/CVE-2021-3156★ 1githubgithub.com/puckiestyle/CVE-2021-3156★ 1githubgithub.com/0x7183/CVE-2021-3156★ 1githubgithub.com/DASICS-ICT/DASICS-CVE-2021-3156★ 1githubgithub.com/nobodyatall648/CVE-2021-3156★ 1githubgithub.com/wangqian06/CVE-2021-3156★ 1githubgithub.com/Shuhaib88/Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156★ 1githubgithub.com/binw2018/CVE-2021-3156-SCRIPT★ 1githubgithub.com/d4ytox/CVE-2021-3156★ 1githubgithub.com/SantiagoSerrao/ScannerCVE-2021-3156★ 1githubgithub.com/RodricBr/CVE-2021-3156★ 1githubgithub.com/TheFlash2k/CVE-2021-3156★ 1githubgithub.com/juju306/CVE-2021-3156★ 1githubgithub.com/q77190858/CVE-2021-3156★ 1githubgithub.com/donghyunlee00/CVE-2021-3156★ 1githubgithub.com/Bad3r/CVE-2021-3156-without-ip-command★ 0githubgithub.com/ymrsmns/CVE-2021-3156★ 0githubgithub.com/freeFV/CVE-2021-3156★ 0githubgithub.com/cdeletre/Serpentiel-CVE-2021-3156★ 0githubgithub.com/perlun/sudo-1.8.3p1-patched★ 0githubgithub.com/gmldbd94/cve-2021-3156★ 0githubgithub.com/ret2basic/SudoScience★ 0githubgithub.com/barebackbandit/CVE-2021-3156★ 0githubgithub.com/Sebastianbedoya25/CVE-2021-3156★ 0githubgithub.com/arvindshima/CVE-2021-3156★ 0githubgithub.com/mutur4/CVE-2021-3156★ 0githubgithub.com/ngtuonghung/CVE-2021-3156★ 0githubgithub.com/Superliverbun/cve-2021-3156-★ 0githubgithub.com/Sornphut/CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-★ 0githubgithub.com/Robblackcatchai/porfolio-Baron-Samedit★ 0githubgithub.com/IJBaig/CVE-2021-3156★ 0githubgithub.com/Shams-Ul-Mehmood/CVE-2021-3156-Project★ 0githubgithub.com/gmh5225/cve-2021-3156-★ 0githubgithub.com/Rana-Ali93/CVE-2021-3156-Sudo-Buffer-Overflow-Linux★ 0githubgithub.com/calonnuotcabe/CVE-2021-3156★ 0githubgithub.com/WhatsWrongAndWhy/CVE-2021-3156★ 0githubgithub.com/TopskiyPavelQwertyGang/Review.CVE-2021-3156★ 0githubgithub.com/DakerQirszh/cve-2021-3156★ 0githubgithub.com/HuzaifaTariqAfzalKhan/CVE-Exploit-Research-Development-ITSOLERA★ 0githubgithub.com/nexcess/sudo_cve-2021-3156★ 0githubgithub.com/Ashish-dawani/CVE-2021-3156-Patch★ 0githubgithub.com/DanielAzulayy/CTF-2021★ 0githubgithub.com/sandesh9978/CVE-2021-3156-Sudo-Checker★ 0githubgithub.com/capturingcats/CVE-2021-3156★ 0githubgithub.com/Exodusro/CVE-2021-3156★ 0githubgithub.com/sbladiamond/CVE-2021-3156★ 0githubgithub.com/asepsaepdin/CVE-2021-3156★ 0githubgithub.com/DDayLuong/CVE-2021-3156★ 0githubgithub.com/acidburn2049/CVE-2021-3156★ 0githubgithub.com/czeti/baron-samedit★ 0githubgithub.com/Kranti08/CVE-2021-3156-Baron-Samedit★ 0githubgithub.com/oneoy/CVE-2021-3156★ 0githubgithub.com/ajtech-hue/CVE-2021-3156-Mitigation-ShellScript-Build★ 0githubgithub.com/d3c3ptic0n/CVE-2021-3156★ 0githubgithub.com/halissha/CVE-2021-3156★ 0githubgithub.com/sharkmoos/Baron-Samedit★ 0githubgithub.com/hycheng15/CVE-2021-3156★ 0githubgithub.com/wurwur/CVE-2021-3156★ 0githubgithub.com/shishirpandey18/CVE-2021-3156★ 0githubgithub.com/ConstantineFedorov/Review.CVE-2021-3156★ 0githubgithub.com/VilmarTuminskii/cve-2021-3156-sudo-lab★ 0githubgithub.com/AmroYasserH/DFIR-CVE-2021-3156-Incident-Response★ 0vulncheckvulncheck.com/xdb/de59d87d7443no verificadovulncheckvulncheck.com/xdb/cb038c4634e2no verificadovulncheckvulncheck.com/xdb/a36a6349c87bno verificadovulncheckvulncheck.com/xdb/a7e527112fb0no verificadovulncheckvulncheck.com/xdb/c5972ce378fcno verificadovulncheckvulncheck.com/xdb/94ac175265dbno verificadovulncheckvulncheck.com/xdb/c7646cc24cf1no verificadovulncheckvulncheck.com/xdb/20f15e46bf13no verificadovulncheckvulncheck.com/xdb/5fa314f8b37fno verificadovulncheckvulncheck.com/xdb/bfb260e80a93no verificadovulncheckvulncheck.com/xdb/c1fae139d5d4no verificadovulncheckvulncheck.com/xdb/e970e6dec7b1no verificadovulncheckvulncheck.com/xdb/a3fcd264aa62no verificadovulncheckvulncheck.com/xdb/172fcbe73544no verificadovulncheckvulncheck.com/xdb/750ce3551defno verificadovulncheckvulncheck.com/xdb/a2e62b6d17d1no verificadovulncheckvulncheck.com/xdb/f3a81abb3ba0no verificadovulncheckvulncheck.com/xdb/42c8e43d9038no verificadovulncheckvulncheck.com/xdb/45a30e5e36feno verificadovulncheckvulncheck.com/xdb/85981dac158cno verificadovulncheckvulncheck.com/xdb/64d475da2992no verificadovulncheckvulncheck.com/xdb/e559a5756f19no verificadovulncheckvulncheck.com/xdb/574e35cbc6bcno verificadovulncheckvulncheck.com/xdb/5fb557d581fano verificadovulncheckvulncheck.com/xdb/ac997bc9135dno verificadovulncheckvulncheck.com/xdb/c07ba8b1fa83no verificadovulncheckvulncheck.com/xdb/07e3d18545fbno verificadovulncheckvulncheck.com/xdb/3397f09dbbdcno verificadovulncheckvulncheck.com/xdb/9fbcde6203e1no verificadovulncheckvulncheck.com/xdb/d92fe7f1eb28no verificadovulncheckvulncheck.com/xdb/8486488deafeno verificadovulncheckvulncheck.com/xdb/36562f643e64no verificadocve_referencepacketstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.htmlno verificadocve_referencepacketstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.htmlno verificadovulncheckvulncheck.com/xdb/33b2727e22e2no verificadovulncheckvulncheck.com/xdb/956619acb26bno verificadovulncheckvulncheck.com/xdb/1e5a3258d388no verificadovulncheckvulncheck.com/xdb/8e3574a80584no verificadovulncheckvulncheck.com/xdb/6f40fc0eb6b6no verificadovulncheckvulncheck.com/xdb/d818ae56992ano verificadovulncheckvulncheck.com/xdb/f074c511a33bno verificadovulncheckvulncheck.com/xdb/25def691895eno verificadovulncheckvulncheck.com/xdb/300797d10318no verificadovulncheckvulncheck.com/xdb/be980714295cno verificadovulncheckvulncheck.com/xdb/853bd97ca84dno verificadovulncheckvulncheck.com/xdb/1db9ceee140bno verificadocve_referencepacketstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.htmlno verificadocve_referencepacketstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.htmlno verificadovulncheckvulncheck.com/xdb/4e6ad9fd3fb3no verificadovulncheckvulncheck.com/xdb/dd12494d2728no verificadocve_referencepacketstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.htmlno verificadovulncheckvulncheck.com/xdb/dc67aa8e60d4no verificadovulncheckvulncheck.com/xdb/8a16e063dbd5no verificadovulncheckvulncheck.com/xdb/ff18a04b19fbno verificadovulncheckvulncheck.com/xdb/b2ee85cf4e76no verificadovulncheckvulncheck.com/xdb/b72767d3ef0bno verificadovulncheckvulncheck.com/xdb/3ee223200973no verificadovulncheckvulncheck.com/xdb/81c88fb24bd9no verificadovulncheckvulncheck.com/xdb/67522d547498no verificadovulncheckvulncheck.com/xdb/e63e0be85a72no verificadovulncheckvulncheck.com/xdb/6b4c5b3f6b0eno verificadovulncheckvulncheck.com/xdb/314b3ed04db3no verificadovulncheckvulncheck.com/xdb/73a26a137f38no verificadovulncheckvulncheck.com/xdb/c60ebdc30c29no verificadovulncheckvulncheck.com/xdb/0573a1989e58no verificadovulncheckvulncheck.com/xdb/1add099f19fcno verificadovulncheckvulncheck.com/xdb/6f8a62e9dc05no verificadovulncheckvulncheck.com/xdb/f80704f9c087no verificadovulncheckvulncheck.com/xdb/bdfb7b3c721cno verificadovulncheckvulncheck.com/xdb/84e3dea90796no verificadovulncheckvulncheck.com/xdb/12b9978dfd35no verificadovulncheckvulncheck.com/xdb/4e52e6bd25cfno verificadovulncheckvulncheck.com/xdb/791107725e9bno verificadovulncheckvulncheck.com/xdb/d82fe374addcno verificadovulncheckvulncheck.com/xdb/22cb903c9959no verificadovulncheckvulncheck.com/xdb/5cd3a38f312ano verificadovulncheckvulncheck.com/xdb/8f873fe619f2no verificadovulncheckvulncheck.com/xdb/98bc51c674a1no verificadovulncheckvulncheck.com/xdb/42c098e8e2ccno verificadovulncheckvulncheck.com/xdb/748cab143d91no verificadovulncheckvulncheck.com/xdb/664271a6cb02no verificadovulncheckvulncheck.com/xdb/1ded723ada65no verificadovulncheckvulncheck.com/xdb/b625d38ee231no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.