CVE-2021-3156: Sudo privilege escalation (cve.mitre.org)

To test if you're vulnerable:

  sudoedit -s '\' `perl -e 'print "A" x 65536'`

Per: https://www.sudo.ws/alerts/unescape_overflow.html

Write-up: https://seclists.org/fulldisclosure/2021/Jan/79

Oof, I'm surprised sudo has lasted this long without serious inspection and fuzzing that should've caught this. Given its sensitive nature and low complexity, I'd say this utility is a high priority for being rewritten in rust.

Discussed previously:

https://news.ycombinator.com/item?id=25919494

https://news.ycombinator.com/item?id=25919360

https://news.ycombinator.com/item?id=25919235