Skip to content
NewA calmer, faster ZeroHour

Apple Patches 10-Year-Old macOS SUDO Root Privilege Escalation Bug

The Hacker Newsby @TheHackersNews ()2 min read1
Analyze CVE-2021-3156 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2021-1805
+1 related CVE
An out-of-bounds write was addressed with improved input validation
7.8
group max
1%
CVE-2021-3156
Heap-Based Buffer Overflow in Sudo Enables Local Privilege Escalation (CVE-2021-3156)
7.8100%KEVPoC ×12
KEV

From the original article

2 min read at thehackernews.com

Apple has rolled out a fix for a critical sudo vulnerability in macOS Big Sur, Catalina, and Mojave that could allow unauthenticated local users to gain root-level privileges on the system. "A local attacker may be able to elevate their privileges," Apple said in a security advisory. "This issue was addressed by updating to sudo version 1.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.