coldbraid

CVE-2021-3156 Sudo Sudo

Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.

CVSS
not scored

CWE-122CWE-193

On CISA’s exploited list

Sudo Heap-Based Buffer Overflow Vulnerability

Added
2022-04-06
Federal patch deadline
2022-04-27
Ransomware use
not known