M-ouse / CVE-2021-3156

CVE-2021-3156

Baron Samedit: Heap-based buffer overflow in Sudo (CVE-2021-3156)

Table of Contents

• Compiling
  • Exploit
  • Library
• References

Compiling

Exploit

gcc -s -o exploit exploit.c -Wall -Werror -Wextra

Library

gcc -fpic -shared -nostdlib -o libnss_X/X.so.2 la.c

References

https://openwall.com/lists/oss-security/2021/01/26/3
https://blog.qualys.com/vulnerabilities-research/2021/01/26/cve-2021-3156-heap-based-buffer-overflow-in-sudo-baron-samedit