CVE-2021-3156

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.
References
Link Resource
https://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit Mailing List Third Party Advisory
https://www.sudo.ws/stable.html#1.9.5p2 Release Notes Vendor Advisory
http://www.openwall.com/lists/oss-security/2021/01/26/3 Exploit Mailing List Third Party Advisory
https://security.gentoo.org/glsa/202101-33 Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ Mailing List Third Party Advisory
https://www.debian.org/security/2021/dsa-4839 Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/01/27/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/01/27/2 Mailing List Third Party Advisory
http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html Third Party Advisory VDB Entry
https://security.netapp.com/advisory/ntap-20210128-0001/ Third Party Advisory
https://security.netapp.com/advisory/ntap-20210128-0002/ Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM Third Party Advisory
http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html Exploit Third Party Advisory VDB Entry
https://www.kb.cert.org/vuls/id/794544 Third Party Advisory US Government Resource
http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html Exploit Third Party Advisory VDB Entry
https://support.apple.com/kb/HT212177 Third Party Advisory
http://seclists.org/fulldisclosure/2021/Feb/42 Mailing List Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10348 Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/02/15/1 Exploit Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2021/Jan/79 Exploit Mailing List Third Party Advisory
https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability Patch Third Party Advisory
https://www.synology.com/security/advisory/Synology_SA_21_02 Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/09/14/2 Mailing List Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sudo_project:sudo:1.9.5:patch1:*:*:*:*:*:*
cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
cpe:2.3:a:sudo_project:sudo:1.9.5:-:*:*:*:*:*:*
cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:mcafee:web_gateway:8.2.17:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:web_gateway:9.2.8:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:web_gateway:10.0.4:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*
cpe:2.3:a:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*

Configuration 9 (hide)

OR cpe:2.3:a:beyondtrust:privilege_management_for_mac:*:*:*:*:*:*:*:*
cpe:2.3:a:beyondtrust:privilege_management_for_unix\/linux:*:*:*:*:basic:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:oracle:micros_compact_workstation_3_firmware:310:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_compact_workstation_3:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:oracle:micros_es400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_es400:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:oracle:micros_kitchen_display_system_firmware:210:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_kitchen_display_system:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:oracle:micros_workstation_5a_firmware:5a:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_workstation_5a:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:oracle:micros_workstation_6_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_workstation_6:-:*:*:*:*:*:*:*

Configuration 15 (hide)

OR cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*

History

03 Sep 2022, 03:40

Type Values Removed Values Added
CPE cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*
First Time Oracle communications Performance Intelligence Center
References (MISC) https://www.oracle.com/security-alerts/cpuapr2022.html - (MISC) https://www.oracle.com/security-alerts/cpuapr2022.html - Patch, Third Party Advisory

20 Apr 2022, 00:16

Type Values Removed Values Added
References
  • (MISC) https://www.oracle.com/security-alerts/cpuapr2022.html -

04 Apr 2022, 12:59

Type Values Removed Values Added
First Time Oracle tekelec Platform Distribution
CPE cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*
References (MISC) https://www.oracle.com/security-alerts/cpuoct2021.html - (MISC) https://www.oracle.com/security-alerts/cpuoct2021.html - Patch, Third Party Advisory

20 Oct 2021, 11:17

Type Values Removed Values Added
References
  • (MISC) https://www.oracle.com/security-alerts/cpuoct2021.html -

27 Sep 2021, 17:12

Type Values Removed Values Added
CPE cpe:2.3:a:sudo_project:sudo:1.9.5:-:*:*:*:*:*:*

16 Sep 2021, 13:19

Type Values Removed Values Added
CPE cpe:2.3:h:oracle:micros_compact_workstation_3:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_workstation_5a:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_kitchen_display_system:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:micros_kitchen_display_system_firmware:210:*:*:*:*:*:*:*
cpe:2.3:o:oracle:micros_workstation_5a_firmware:5a:*:*:*:*:*:*:*
cpe:2.3:o:oracle:micros_workstation_6_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:oracle:micros_compact_workstation_3_firmware:310:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_es400:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:micros_workstation_6:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:micros_es400_firmware:*:*:*:*:*:*:*:*
References (MLIST) http://www.openwall.com/lists/oss-security/2021/09/14/2 - (MLIST) http://www.openwall.com/lists/oss-security/2021/09/14/2 - Mailing List, Patch, Third Party Advisory
References (N/A) https://www.oracle.com//security-alerts/cpujul2021.html - (N/A) https://www.oracle.com//security-alerts/cpujul2021.html - Patch, Third Party Advisory

15 Sep 2021, 00:15

Type Values Removed Values Added
References
  • (MLIST) http://www.openwall.com/lists/oss-security/2021/09/14/2 -
  • (N/A) https://www.oracle.com//security-alerts/cpujul2021.html -

26 Mar 2021, 20:02

Type Values Removed Values Added
CWE CWE-787 CWE-193

16 Mar 2021, 14:15

Type Values Removed Values Added
Summary Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character. Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

08 Mar 2021, 13:37

Type Values Removed Values Added
CPE cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*
cpe:2.3:a:beyondtrust:privilege_management_for_mac:*:*:*:*:*:*:*:*
cpe:2.3:a:synology:diskstation_manager:6.2:*:*:*:*:*:*:*
cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*
cpe:2.3:a:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*
cpe:2.3:a:beyondtrust:privilege_management_for_unix\/linux:*:*:*:*:basic:*:*:*
cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*
References (CONFIRM) https://www.synology.com/security/advisory/Synology_SA_21_02 - (CONFIRM) https://www.synology.com/security/advisory/Synology_SA_21_02 - Third Party Advisory
References (MLIST) https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html - (MLIST) https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html - Mailing List, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2021/Jan/79 - (FULLDISC) http://seclists.org/fulldisclosure/2021/Jan/79 - Exploit, Mailing List, Third Party Advisory
References (MISC) https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability - (MISC) https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability - Patch, Third Party Advisory

23 Feb 2021, 18:15

Type Values Removed Values Added
References
  • (CONFIRM) https://www.synology.com/security/advisory/Synology_SA_21_02 -

19 Feb 2021, 19:15

Type Values Removed Values Added
References
  • (MLIST) https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html -
  • (FULLDISC) http://seclists.org/fulldisclosure/2021/Jan/79 -
  • (MISC) https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability -

18 Feb 2021, 17:19

Type Values Removed Values Added
References (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10348 - (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10348 - Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ - Third Party Advisory (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ - Mailing List, Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2021/02/15/1 - (MLIST) http://www.openwall.com/lists/oss-security/2021/02/15/1 - Exploit, Mailing List, Third Party Advisory
References (FULLDISC) http://seclists.org/fulldisclosure/2021/Feb/42 - (FULLDISC) http://seclists.org/fulldisclosure/2021/Feb/42 - Mailing List, Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ - Third Party Advisory (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ - Mailing List, Third Party Advisory
CPE cpe:2.3:a:mcafee:web_gateway:9.2.8:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:web_gateway:8.2.17:*:*:*:*:*:*:*
cpe:2.3:a:mcafee:web_gateway:10.0.4:*:*:*:*:*:*:*

15 Feb 2021, 13:15

Type Values Removed Values Added
References
  • (MLIST) http://www.openwall.com/lists/oss-security/2021/02/15/1 -

13 Feb 2021, 09:15

Type Values Removed Values Added
References
  • (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10348 -

12 Feb 2021, 03:15

Type Values Removed Values Added
References
  • (FULLDISC) http://seclists.org/fulldisclosure/2021/Feb/42 -

11 Feb 2021, 15:03

Type Values Removed Values Added
CPE cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
References (CERT-VN) https://www.kb.cert.org/vuls/id/794544 - (CERT-VN) https://www.kb.cert.org/vuls/id/794544 - Third Party Advisory, US Government Resource
References (MISC) http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html - (MISC) http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry
References (CONFIRM) https://support.apple.com/kb/HT212177 - (CONFIRM) https://support.apple.com/kb/HT212177 - Third Party Advisory

09 Feb 2021, 20:15

Type Values Removed Values Added
References
  • (CONFIRM) https://support.apple.com/kb/HT212177 -

05 Feb 2021, 18:15

Type Values Removed Values Added
References
  • (MISC) http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html -

05 Feb 2021, 14:15

Type Values Removed Values Added
References
  • (CERT-VN) https://www.kb.cert.org/vuls/id/794544 -

03 Feb 2021, 19:42

Type Values Removed Values Added
CWE CWE-787
CVSS v2 : unknown
v3 : unknown
v2 : 7.2
v3 : 7.8
CPE cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*
cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:a:sudo_project:sudo:1.9.5:patch1:*:*:*:*:*:*
References (CONFIRM) https://security.netapp.com/advisory/ntap-20210128-0001/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20210128-0001/ - Third Party Advisory
References (DEBIAN) https://www.debian.org/security/2021/dsa-4839 - (DEBIAN) https://www.debian.org/security/2021/dsa-4839 - Third Party Advisory
References (CONFIRM) https://www.sudo.ws/stable.html#1.9.5p2 - (CONFIRM) https://www.sudo.ws/stable.html#1.9.5p2 - Release Notes, Vendor Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ - Third Party Advisory
References (CONFIRM) https://security.netapp.com/advisory/ntap-20210128-0002/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20210128-0002/ - Third Party Advisory
References (MISC) http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html - (MISC) http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html - Third Party Advisory, VDB Entry
References (MISC) https://www.openwall.com/lists/oss-security/2021/01/26/3 - (MISC) https://www.openwall.com/lists/oss-security/2021/01/26/3 - Exploit, Mailing List, Third Party Advisory
References (MISC) http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html - (MISC) http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM - (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM - Third Party Advisory
References (GENTOO) https://security.gentoo.org/glsa/202101-33 - (GENTOO) https://security.gentoo.org/glsa/202101-33 - Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2021/01/26/3 - (MLIST) http://www.openwall.com/lists/oss-security/2021/01/26/3 - Exploit, Mailing List, Third Party Advisory
References (MISC) http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html - (MISC) http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry
References (MLIST) http://www.openwall.com/lists/oss-security/2021/01/27/2 - (MLIST) http://www.openwall.com/lists/oss-security/2021/01/27/2 - Mailing List, Third Party Advisory
References (MLIST) http://www.openwall.com/lists/oss-security/2021/01/27/1 - (MLIST) http://www.openwall.com/lists/oss-security/2021/01/27/1 - Mailing List, Third Party Advisory
References (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ - (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ - Third Party Advisory

03 Feb 2021, 18:15

Type Values Removed Values Added
References
  • (MISC) http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html -

01 Feb 2021, 19:15

Type Values Removed Values Added
References
  • (MISC) http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html -

29 Jan 2021, 23:15

Type Values Removed Values Added
References
  • (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM -

28 Jan 2021, 18:15

Type Values Removed Values Added
References
  • (CONFIRM) https://security.netapp.com/advisory/ntap-20210128-0001/ -
  • (CONFIRM) https://security.netapp.com/advisory/ntap-20210128-0002/ -

28 Jan 2021, 06:15

Type Values Removed Values Added
Summary Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character: Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

27 Jan 2021, 16:15

Type Values Removed Values Added
References
  • (MISC) http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html -

27 Jan 2021, 13:37

Type Values Removed Values Added
References
  • (MLIST) http://www.openwall.com/lists/oss-security/2021/01/27/2 -

27 Jan 2021, 10:15

Type Values Removed Values Added
References
  • (MLIST) http://www.openwall.com/lists/oss-security/2021/01/27/1 -
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/ -

27 Jan 2021, 04:15

Type Values Removed Values Added
References
  • (DEBIAN) https://www.debian.org/security/2021/dsa-4839 -
  • (GENTOO) https://security.gentoo.org/glsa/202101-33 -
  • (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/ -

26 Jan 2021, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-01-26 21:15

Updated : 2022-09-03 03:40


NVD link : CVE-2021-3156

Mitre link : CVE-2021-3156


JSON object : View

Products Affected

fedoraproject

  • fedora

beyondtrust

  • privilege_management_for_mac
  • privilege_management_for_unix\/linux

synology

  • skynas_firmware
  • vs960hd
  • vs960hd_firmware
  • skynas
  • diskstation_manager_unified_controller
  • diskstation_manager

oracle

  • micros_kitchen_display_system
  • micros_es400
  • micros_workstation_5a_firmware
  • micros_workstation_6
  • micros_compact_workstation_3
  • tekelec_platform_distribution
  • micros_compact_workstation_3_firmware
  • communications_performance_intelligence_center
  • micros_workstation_6_firmware
  • micros_kitchen_display_system_firmware
  • micros_workstation_5a
  • micros_es400_firmware

netapp

  • solidfire
  • hci_management_node
  • oncommand_unified_manager_core_package

sudo_project

  • sudo

mcafee

  • web_gateway

debian

  • debian_linux
CWE
CWE-193

Off-by-one Error