juju306/cve-2021-3156Proof-of-concept exploit for CVE-2021-3156, a heap-based buffer overflow in sudo, providing root shell access without brute force. Tested on Ubuntu 20.04 with sudo 1.8.31.
For educational purposes etc.
Tested on Ubuntu 20.04 against sudo 1.8.31
All research credit: Qualys Research Team Check out the details on their blog.
You can check your version of sudo is vulnerable with: $ sudoedit -s Y.
If it asks for your password it's most likely vulnerable, if it prints usage information it isn't.
You can downgrade to the vulnerable version on Ubuntu 20.04 for testing purposes with $ sudo apt install sudo=1.8.31-1ubuntu1
$ make
$ ./exploit
