CVE-2021-3156

CVE-2021-3156 copied to clipboard

Exploitation on Debian 8 (jessie)

2

Hi @worawit Is exploitation possible on Debian 8 ? **$ sudo --version** Sudo version 1.8.10p3 Sudoers policy plugin version 1.8.10p3 Sudoers file grammar version 43 Sudoers I/O plugin version 1.8.10p3...

xhat007

Cannot find cmnd size Ubuntu 16 / GLIB 2.23

3

Hi @worawit i make python3 version of exploit_userspec.py via [Python2 to 3 Conventer](https://www.pythonconverter.com/) and try use it. i get error "Cannot find cmnd size". does this mean that this configuration...

ghost

Exploitation on Debian 9.5 stretch

4

Is exploitation possible on Debian GNU/Linux 9.5 (stretch) Sudo version : 1.8.19p1 Kernel : Linux localhost 4.9.0-8-amd64 #1 SMP Debian 4.9.110-3+deb9u6 (2018-10-08) x86_64 GNU/Linux I tried all the exploit none...

xhat007

user not in /etc/sudoers

6

excuse me，I have learned a lot from your exploit methods。And I found it necessary that the user should be in /etc/sudoers when I use exploit_userspec.py,if the user is not in...

lalkh

Exploitation on Debian 7

1

Is exploitation possible on Debian 7.11(x86_64) sudo version 1.8.5p2 Kernel: 3.10.0 ldd version: 2.13-38+deb7u12 POCs lead to segfault and the last resort timestamp race is not effective Any help would...

sandycrack

Exploitation on Debian 10 cloud image

5

Hi, I was wondering if you have looked into exploitation strategies for systems based on Debian 10 cloud images, such as [OpenStack](https://cloud.debian.org/images/cloud/OpenStack/current-10/). Many cloud providers use these images to deploy...

MattyAgain