High 7.8Known exploited (CISA KEV)Published Jan 25, 2021

CVE-2021-3156Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit…

Updated under an hour ago (Oct 27, 2026, 12:10 AM ET)

Does this affect you?

It affects sudo_project sudo and 23 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Apr 6, 2022; federal agencies had to remediate by Apr 27, 2022. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for sudo_project sudo

Exploited in the last 30 days

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

CVSS: 7.8 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-193
Known exploited: Added to CISA KEV Apr 6, 2022; federal remediation due Apr 27, 2022Apply updates per vendor instructions.
EPSS (exploitation in the next 30 days): 99.96% (percentile 100)
Assigned by: mitre
NVD analysis: Analyzed
Record last updated: Oct 21, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

sudo_project sudo sudo_project:sudo	from 1.8.2 before 1.8.32; from 1.9.0 before 1.9.5; 1.9.5; 1.9.5	NVD
fedoraproject fedora fedoraproject:fedora	32; 33	NVD
debian debian_linux debian:debian_linux	9.0; 10.0	NVD
netapp active_iq_unified_manager netapp:active_iq_unified_manager	all versions	NVD
netapp cloud_backup netapp:cloud_backup	all versions	NVD
netapp hci_management_node netapp:hci_management_node	all versions	NVD
netapp oncommand_unified_manager_core_package netapp:oncommand_unified_manager_core_package	all versions	NVD
netapp ontap_select_deploy_administration_utility netapp:ontap_select_deploy_administration_utility	all versions	NVD
netapp ontap_tools netapp:ontap_tools	9	NVD
netapp solidfire netapp:solidfire	all versions	NVD
1–10 of 24

References

References

https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html	mailing-list, third-party-advisory
http://seclists.org/fulldisclosure/2021/Jan/79	mailing-list, exploit, third-party-advisory
http://www.openwall.com/lists/oss-security/2021/01/26/3	mailing-list, exploit, third-party-advisory
https://security.gentoo.org/glsa/202101-33	vendor-advisory, third-party-advisory
https://www.debian.org/security/2021/dsa-4839	vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/	vendor-advisory, mailing-list, release-notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/	vendor-advisory, mailing-list, release-notes
http://www.openwall.com/lists/oss-security/2021/01/27/1	mailing-list, third-party-advisory
http://www.openwall.com/lists/oss-security/2021/01/27/2	mailing-list, third-party-advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM	vendor-advisory, third-party-advisory
1–10 of 30

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.