High 1 exploited CVE ALAS2-2021-1590 1 CVE

Important: sudo security update (Amazon Linux 2)

Published Jan 25, 2021 · Updated Jan 26, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3156: 99999:

Fixed packages 3

Release	Package	Fixed in
Amazon Linux · 2	sudo	0:1.8.23-4.amzn2.2.1
Amazon Linux · 2	sudo-debuginfo	0:1.8.23-4.amzn2.2.1
Amazon Linux · 2	sudo-devel	0:1.8.23-4.amzn2.2.1

Vulnerabilities 1

High 7.8

CVE-2021-3156 Exploited Public exploit EPSS 100%

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

sudo sudo sudo Debian Ubuntu Alpine

Jan 26, 2021
KEV Apr 6, 2022

References

web
https://alas.aws.amazon.com/cve/html/CVE-2021-3156.html