CVE-2021-3156 PoC — Sudo 缓冲区错误漏洞

Source

https://github.com/nobodyatall648/CVE-2021-3156

Associated Vulnerability

Title:Sudo 缓冲区错误漏洞 (CVE-2021-3156)
Description:Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Description

checking CVE-2021-3156 vulnerability & patch script

Readme

# CVE-2021-3156
## checking CVE-2021-3156 vulnerability & patching script

CVE-2021-3156 description:

Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.


### To check for CVE-2021-3156 vulnerability:
```
python3 CVE-2021-3156_checker.py
```

### To patch CVE-2021-3156 vulnerability:
```
chmod +x ./CVE-2021-3156_patcher.sh && ./CVE-2021-3156_patcher.sh
```

### PoC image can be found in /PoC_Images directory.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!