Security
1 min read0 views
CVE-2021-3156: Root escalation via off-by-one in argument handling (Update: proof of concept on GitHub published)
Update: proof of concept on GitHub published. This vulnerability affects Sudo, a widely used command-line utility on Linux and Unix systems that lets authorized users run commands with elevated privileges. An attacker who can run the "sudoedit -s" command with a specially crafted argument can trigger a heap-based buffer overflow, potentially gaining full root control of the affected system.
Reading Level🟢Beginner
Listen to this article
Update: proof of concept on GitHub published. This vulnerability affects Sudo, a widely used command-line utility on Linux and Unix systems that lets authorized users run commands with elevated privileges. An attacker who can run the "sudoedit -s" command with a specially crafted argument can trigger a heap-based buffer overflow, potentially gaining full root control of the affected system.
Original Source
cve.now CISA KEVLike this article
Share this article
Share:
Related Articles
CVE-2025-24016: Wazuh remote code execution via unsafe deserialization in server (Update: proof of concept on GitHub published)
1 min read·1d ago
CVE-2026-114713: UnrealIRCd remote command injection in labeled-response module (Update: added to CISA KEV)
1 min read·1d ago
CVE-2026-123039: Check Point local privilege escalation to root in DynamicCLI daemon (Update: added to CISA KEV)
1 min read·1d ago