CVE-2021-3156: Sudo privilege escalation(cve.mitre.org)
cve.mitre.org
CVE-2021-3156: Sudo privilege escalation
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-3156
3 comments
To test if you're vulnerable:
Write-up: https://seclists.org/fulldisclosure/2021/Jan/79
sudoedit -s '\' `perl -e 'print "A" x 65536'`
Write-up: https://seclists.org/fulldisclosure/2021/Jan/79
Oof, I'm surprised sudo has lasted this long without serious inspection and fuzzing that should've caught this. Given its sensitive nature and low complexity, I'd say this utility is a high priority for being rewritten in rust.
If you tell rust to do silly things it will still do silly things. The “fix” for this is less complexity, like doas. Sudo is a ridiculously complex program
https://news.ycombinator.com/item?id=25919494
https://news.ycombinator.com/item?id=25919360
https://news.ycombinator.com/item?id=25919235