CVE:CVE-2021-3156
CNNVD:CNNVD-202101-2221
Sudo是一款使用于类Unix系统的，允许用户通过安全的方式使用特殊的权限执行命令的程序。
Sudo 1.9.5p2 之前版本存在缓冲区错误漏洞，攻击者可使用sudoedit -s和一个以单个反斜杠字符结束的命令行参数升级到root。
solution:Upgrade sudo_project sudo to a higher version than 1.8.32,1.9.5,1.9.5,1.9.5:patch1,and avoid the version [1.8.2,1.8.32),[1.9.0,1.9.5),1.9.5,1.9.5:patch1; Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp oncommand_unified_manager_core_package to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade mcafee web_gateway to a higher version than 8.2.17,9.2.8,10.0.4,and avoid the version 8.2.17,9.2.8,10.0.4; Upgrade synology diskstation_manager to a higher version than 6.2,and avoid the version 6.2; Upgrade synology diskstation_manager_unified_controller to a higher version than 3.0,and avoid the version 3.0; Upgrade synology skynas_firmware to a higher version than -; Upgrade synology vs960hd_firmware to a higher version than -; Upgrade beyondtrust privilege_management_for_mac to a higher version than 21.1.1,and avoid the version (,21.1.1); Upgrade beyondtrust privilege_management_for_unix/linux to a higher version than 10.3.2-10,and avoid the version (,10.3.2-10); Upgrade oracle micros_compact_workstation_3_firmware to a higher version than 310,and avoid the version 310; Upgrade oracle micros_es400_firmware to a higher version than 410,and avoid the version [400,410]; Upgrade oracle micros_kitchen_display_system_firmware to a higher version than 210,and avoid the version 210; Upgrade oracle micros_workstation_5a_firmware to a higher version than 5a,and avoid the version 5a; Upgrade oracle micros_workstation_6_firmware to a higher version than 655,and avoid the version [610,655]; Upgrade oracle communications_performance_intelligence_center to a higher version than 10.3.0.2.1,10.4.0.3.1,and avoid the version [10.3.0.0.0,10.3.0.2.1],[10.4.0.1.0,10.4.0.3.1]; Upgrade oracle tekelec_platform_distribution to a higher version than 7.7.1,and avoid the version [7.4.0,7.7.1]