References https://nvd.nist.gov/vuln/detail/CVE-2021-3156 https://blog.qualys.com/vulnerabilities-threat-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit https://www.cnblogs.com/Rain99-/p/14354452.html https://github.com/potats0/Blogs-1/blob/main/CVE-2021-3156%EF%BC%9ASudo%20%E5%A0%86%E7%BC%93%E5%86%B2%E5%8C%BA%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%20%E5%A4%8D%E7%8E%B0%E8%BF%87%E7%A8%8B.md https://openeuler.org/zh/blog/liujingang09/2021-01-29-sudo-cve-2021-3156.html https://www.anquanke.com/post/id/229948 https://www.secpulse.com/archives/152662.html https://support.huaweicloud.com/bulletin-cce/cce_bulletin_0022.html https://www.sudo.ws/alerts/unescape_overflow.html https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156
Related VulnerabilitiesPoCCVE-2019-14287: Sudo <= 1.8.27 - Security BypassPoCCVE-2021-3156: Sudo Baron Samedit - Local Privilege EscalationPoCrw-sudoers: /etc/sudoers writable or readable - Privilege EscalationPoCsudo-nopasswd: Sudo NOPASSWD - Privilege EscalationSudo 权限提升漏洞sudo提权漏洞(CVE-2023-22809)