https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:32:03 +0000 https://vulnerability.circl.lu/vuln/cve-2021-3156 <p>Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via &#34;sudoedit -s&#34; and a command-line argument that ends with a single backslash character.</p> <p>Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via &#34;sudoedit -s&#34; and a command-line argument that ends with a single backslash character.</p> https://vulnerability.circl.lu/vuln/cve-2021-3156 https://vulnerability.circl.lu/vuln/usn-4705-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: sudo, Ubuntu:18.04:LTS: sudo, Ubuntu:20.04:LTS: sudo</p> <p>It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue to obtain unintended access to the administrator account. (CVE-2021-3156)</p> <p>It was discovered that the Sudo sudoedit utility incorrectly handled checking directory permissions. A local attacker could possibly use this issue to bypass file permissions and determine if a directory exists or not. (CVE-2021-23239)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: sudo, Ubuntu:18.04:LTS: sudo, Ubuntu:20.04:LTS: sudo</p> <p>It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue to obtain unintended access to the administrator account. (CVE-2021-3156)</p> <p>It was discovered that the Sudo sudoedit utility incorrectly handled checking directory permissions. A local attacker could possibly use this issue to bypass file permissions and determine if a directory exists or not. (CVE-2021-23239)</p> https://vulnerability.circl.lu/vuln/usn-4705-1