CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)

A heap overflow vulnerability has been hiding in plain sight for nearly 10 years. Any unprivileged user can gain root privileges on a vulnerable host using a default sudo configuration by exploiting this vulnerability. The vulnerability affects all legacy versions from 1.8.2 to 1.9.5p1 in their default configuration. Other operating systems and distributions are also likely to be exploitable. It has been reported that macOS, AIX, and.Solaris are also vulnerable to CVE-2021-3156.”]

Source: https://blog.qualys.com/vulnerabilities-threat-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit