CVE-2021-3156
CVE-2021-3156 copied to clipboard
Only Ubuntu is vulnerable
I tried the exploit on several different old Centos. Exploit fails
CentOS release 6.10 Linux version 2.6.32-696 Sudo version 1.8.6p3 Sudoers policy plugin version 1.8.6p3 Sudoers file grammar version 42 Sudoers I/O plugin version 1.8.6p3 ldd (GNU libc) 2.12
sudoedit -s / sudoedit: /: not a regular file
Its all about the glibc version. ı couldnt find any exploit for <2.19 libgc versions. You know this buffer over flow mechanism related with c language. glibc is the c library.