Skip to content

Tools Exploits Blog

Tools Exploits Blog

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading vulnerability catalog

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Loading CVE intelligence

CVE-2021-3156: Sudo Heap-Based Buffer Overflow Vulnerability | Kitploit

Back to Exploits

CVE-2021-3156

HighPublished

Sudo Heap-Based Buffer Overflow Vulnerability

Published: Jan 26, 2021
Updated: Oct 21, 2025
Assigning CNA: mitre
Evidence observed: Feb 3, 2021

Primary CVSS

7.8/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS probability estimate

100.0%

High · next 30 days

Percentile: 100.0%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

Sources

79

CVE-2021-3156Exploit
Sudo Heap Overflow Baron Samedit
CVE-2021-3156-PoCExploit
Heap-based buffer overflow exploit for CVE-2021-3156 in sudo, offering local privilege escalation to root on vulnerable Linux systems.
CVE-2021-3156Exploit
CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)
CVE-2021-3156

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

PoC

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo that allows local privilege escalation to root via sudoedit -s.

CVE-2021-3156-ExpExploit

Exploit for CVE-2021-3156, a heap-based buffer overflow in sudo, enabling local privilege escalation to root on vulnerable systems.

CVE-2021-3156Exploit

Exploit for CVE-2021-3156 (Baron Samedit), a heap-based buffer overflow in sudo, enabling local privilege escalation. Includes target list and bruteforce mode.

CVE-2021-3156Exploit

CVE-2021-3156 POC and Docker and Analysis write up

CVE-2021-3156Exploit

Root shell PoC for CVE-2021-3156

baron-sameditPoC

This repository contains a Proof-of-Concept (PoC) exploit for the Baron Samedit vulnerability (CVE-2021-3156). The exploit demonstrates privilege escalation on Ubuntu 20.04 with sudo version 1.8.31 and glibc version 2.31. It includes an assembly-based exploit, a shared object payload, and a Makefile for automated compilation.

DASICS-CVE-2021-3156Exploit

Exploit for CVE-2021-3156 (sudo heap-based buffer overflow) enabling local privilege escalation to root, with a reproducible QEMU-based testing environment for RISC-V Linux systems.

CVE-2021-3156Exploit

C exploit for CVE-2021-3156, a heap-based buffer overflow in sudo allowing local privilege escalation to root. Includes proof-of-concept code for testing and security assessment.

CVE-2021-3156Exploit

Exploit for CVE-2021-3156 (sudo heap buffer overflow) with a Python-based proof-of-concept for privilege escalation to root, including a Vagrant lab environment.

CVE-2021-3156Exploit

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo, providing root shell access without bruteforce. Tested on Ubuntu 20.04 with sudo 1.8.31.

CVE-2021-3156-PATCHERPatch

This simple bash script will patch the recently discovered sudo heap overflow vulnerability.

CVE-2021-3156Exploit

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo (Baron Samedit). Provides target selection, manual parameter tuning, and experimental brute-force detection for privilege escalation.

CVE-2021-3156Exploit

Exploit for CVE-2021-3156 (Baron Samedit) sudo heap-based buffer overflow, enabling local privilege escalation to root on vulnerable systems.

CVE-2021-3156Research

CVE-2021-3156 (Baron Samedit) Report and Research

CVE-2021-3156-Baron-SameditExploit

1day research effort

CVE-2021-3156-Baron-SameditExploit

Exploitation and mitigation analysis of CVE-2021-3156 heap-based buffer overflow in sudo

CVE-2021-3156Exploit

Exploit generator for sudo CVE-2021-3156

CVE-2021-3156Research

Notes regarding CVE-2021-3156: Heap-Based Buffer Overflow in Sudo

CVE-2021-3156Exploit

Visualization, Fuzzing, Exploit and Patch of Baron Samedit Vulnerability

CVE-2021-3156PoC

checking CVE-2021-3156 vulnerability & patch script

CVE-2021-3156Exploit

Proof-of-concept exploit for CVE-2021-3156 (Baron Samedit), a heap-based buffer overflow in sudo enabling local privilege escalation to root. Supports multiple targets and brute-force mode.

CVE-2021-3156PoC

CVE-2021-3156

CVE-2021-3156-centos7Exploit

利用sudo提权，只针对cnetos7

CVE-2021-3156Exploit

Exploit for CVE-2021-3156 (Sudo Baron Samedit) targeting Linux x64 with multiple variants for different glibc and sudo versions.

PE_CVE-CVE-2021-3156Exploit

Exploit for Ubuntu 20.04 using CVE-2021-3156 enhanced with post-exploitation scripts

SudoScienceResearch

In-depth technical analysis of CVE-2021-3156, a heap-based buffer overflow in sudo, covering root cause, exploitation techniques, and mitigation.

CVE-2021-3156Exploit

CVE-2021-3156

CVE-2021-3156Exploit

CVE-2021-3156

CVE-2021-3156-plusExploit

CVE-2021-3156非交互式执行命令

CVE-2021-3156Exploit

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo before 1.9.5p2, enabling privilege escalation to root via sudoedit -s.

CVE-2021-3156-ProjectPoC

Educational lab environment for CVE-2021-3156 (Baron Samedit) with a Dockerized vulnerable sudo target, exploit scaffold, canary test, root-cause analysis, and patched comparison.

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156PoC

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo that allows local privilege escalation to root via sudoedit -s with a crafted command-line argument.

CVE-2021-3156PoC

PoC for CVE-2021-3156 (sudo heap overflow)

CVE-2021-3156Exploit

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo that allows local privilege escalation to root on Ubuntu 20.04 and Debian 10.

CVE-2021-3156Exploit

Proof-of-concept exploit for CVE-2021-3156 (Baron Samedit), a heap-based buffer overflow in sudo that allows local privilege escalation to root. Written in C and BASH, it spawns a root shell on vulnerable systems.

CVE-2021-3156-Baron-SameditExploit

A simple Docker lab and Exploit setup for CVE-2021-3156 - "Baron Samedit".

CVE-2021-3156PoC

Root shell proof-of-concept exploit for CVE-2021-3156 (sudo Baron Samedit) heap-based buffer overflow, enabling local privilege escalation on vulnerable sudo versions.

CVE-2021-3156Exploit

Sudo Baron Samedit Exploit

CVE-2021-3156Patch

CVE-2021-3156

CVE-2021-3156Exploit

CVE-2021-3156: Sudo heap overflow exploit for Debian 10

docker-CVE-2021-3156Research

A docker environment to research CVE-2021-3156

CVE-2021-3156-PatchPatch

Patch Script for CVE-2021-3156 Heap Overflow

CVE-2021-3156-without-ip-commandExploit

fork of worawit/CVE-2021-3156 exploit_nss.py modified to work with ifconfig instead of the ip command

CVE-2021-3156Exploit

Exploit for CVE-2021-3156, a heap-based buffer overflow in sudo's argument parsing, enabling local privilege escalation to root.

CVE-2021-3156PoC

CVE-2021-3156漏洞修复Shell

CVE-2021-3156-SCRIPTExploit

Automated exploit script for CVE-2021-3156, a sudo heap-based buffer overflow, enabling local privilege escalation on vulnerable Linux systems.

CVE-2021-3156Exploit

Exploiting heap-based buffer overflow in sudo for privilege escalation

CVE-2021-3156PoC

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo that allows local privilege escalation to root on Linux systems.

CVE-2021-3156Exploit

Sudo heap-based buffer overflow privilege escalation commands and mitigations.

cve-2021-3156Exploit

fixed version

CVE-2021-3156PoC

Exploit for CVE-2021-3156, a heap-based buffer overflow in sudo that allows local privilege escalation to root. Provides a proof-of-concept for testing and analysis.

cve-2021-3156Exploit

Exploit script for CVE-2021-3156, a heap-based buffer overflow in sudo that allows privilege escalation to root. Includes verification and exploitation logic.

CVE-2021-3156PoC

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo allowing local privilege escalation to root.

CVE-2021-3156Exploit

Go-based exploit for CVE-2021-3156, a sudo heap overflow vulnerability enabling local privilege escalation on Linux systems.

CVE-2021-3156Exploit

Description Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

pwneditResearch

CVE-2021-3156 - Sudo Baron Samedit

CVE-2021-3156PoC

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo that allows local privilege escalation to root.

CVE-2021-3156Exploit

Educational exploit implementation and analysis of CVE-2021-3156, a heap-based buffer overflow in sudo's set_cmnd() function, enabling privilege escalation to root via crafted command-line arguments.

CVE-2021-3156Exploit

Baron SameEdit Heap Overflow LPE 1-Day Exploit

CVE-2021-3156PoC

POC for CVE-2021-3156 - Heap-based buffer overflow in sudo

CVE-2021-3156Exploit

复现别人家的CVEs系列

exploitsExploit

Proof-of-concept exploit collection targeting Linux kernel LPE, sudo heap overflow, and Chrome V8 OOB write vulnerabilities for penetration testing.

CVE-2021-3156-Sudo-Buffer-Overflow-LinuxExploit

Red Team exploitation of CVE-2021-3156 (Baron Samedit) – Heap Buffer Overflow in Sudo leading to Local Privilege Escalation on Ubuntu 20.04

sudo-exploitExploit

CVE-2021-3156 - sudo exploit for ubuntu 18.04 & 20.04

CVE-2021-3156Exploit

Exploit code for CVE-2021-3156, a heap-based buffer overflow in sudo's argument parsing, enabling local privilege escalation to root.

Baron-SameditExploit

Exploit and Demo system for CVE-2021-3156

CVE-2021-3156-Heap-Based-Buffer-Overflow-in-Sudo-Baron-Samedit-Exploit

Technical analysis and exploit development for CVE-2021-3156, a heap-based buffer overflow in Sudo, including three working exploits for local privilege escalation on major Linux distributions.

Review.CVE-2021-3156Exploit

CVE-2021-3156-Exploit-Demo

CVE-2021-3156Exploit

Exploit for CVE-2021-3156, a heap-based buffer overflow in sudo that allows local privilege escalation to root. Includes proof-of-concept code for testing and security assessments.

CVE-2021-3156Exploit

Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo that allows local privilege escalation to root. Includes exploitation logic and payload delivery.

CVE-2021-3156Exploit

Different files for computer security coursework

cve-2021-3156Detection

cve-2021-3156;sudo堆溢出漏洞；漏洞检测

kernel-exploit-factoryResearch

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

CVE-2021-3156Exploit

Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (1)Exploit

West Shepherd · multiple · Feb 3, 2021

Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (2)Exploit

nu11secur1ty · multiple · Feb 3, 2021