The Linux Flaw you can't afford to Ignore (CVE-2021-3156)
Linux and Unix operating systems require regular patching like any IT system, but as security professionals, ethical hackers, and criminal hackers will tell you, regular Linux and Unix patching is often neglected. CVE-2021-3156 sudo Vulnerability Last week (26th January 2021) a new critical rated Linux\Unix vulnerability was made public under CVE-2021-3156 . Specifically, the vulnerability is within the 'sudo' program, which is an abbreviation of ' superuser do ', well that's how I remember it. Sudo is a powerful and fundamental program found within all Linux and Unix distributions, allowing users to execute programs with the security privileges of another user. A typical use of sudo is where you need to run a program with privilege level (i.e. administrator) access rights. The sudo 'heap overflow' vulnerability was discovered by Qualys researchers, the exploit allows any unprivileged user to gain root level (i.e. administrative) privileges. Qualys has p...