Research
Heap-Based Overflow Vulnerability in Sudo [CVE-2021-3156]
Sudo is a powerful Unix/Linux utility allowing authorized users to execute commands as a superuser or another user based on security policies.
This paper covers Unix like systems which are vulnerable to heap-based buffer overflow sudo vulnerability. This vulnerability was hidden for around the last ten years, affecting unpatched versions of sudo programs from 1.8.2-1.8.31p2 and 1.9.0-1.9.5p1.
Key Pointers:
- Understanding the history of this vulnerability and how it works
- Understanding the severity of this vulnerability with CVSS score of 7.8
- Mapping the vulnerable sudo versions and understanding the scope of impact
- Preparing the prerequisites to set up the lab and demonstrate the exploitation
- Learning about the mitigations to patch this vulnerability