Skip to content
OpenAdvisories
High 1 exploited CVE RHSA-2021:0221 1 CVE

Red Hat Security Advisory: sudo security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client sudo 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::client sudo-debuginfo 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::client sudo-devel 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::computenode sudo-debuginfo 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::computenode sudo-devel 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::server sudo 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::server sudo-debuginfo 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::server sudo-devel 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::workstation sudo 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::workstation sudo-debuginfo 0:1.8.23-10.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::workstation sudo-devel 0:1.8.23-10.el7_9.1

Vulnerabilities 1

  • High 7.8
    CVE-2021-3156 Exploited Public exploit EPSS 100%

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

    sudo sudo sudo Debian Ubuntu Alpine
    KEV Apr 6, 2022

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2021-002
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1917684
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0221.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-3156
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-3156
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-3156
  • article
    https://www.qualys.com/2021/01/26/cve-2021-3156/baron-samedit-heap-based-overflow-sudo.txt
  • article
    https://www.sudo.ws/alerts/unescape_overflow.html
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog