← KEV catalog
CISA known exploited vulnerability

CVE-2021-3156

Sudo Heap-Based Buffer Overflow Vulnerability

SOURCE FACT

Sudo · Sudo

Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2021-3156

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?