Back to the CVE list
CVE-2021-3156 CISA KEV · Actively exploited

Sudo Heap-Based Buffer Overflow Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

4 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

A Python-based security tool for checking sudo versions for potential exposure to CVE-2021-3156 (Baron Samedit). Designed for authorized security testing and learning.

Public PoCSource updated: 04.10.2026 14:11:14

Shams-Ul-Mehmood/CVE-2021-3156-Project

Public PoCSource updated: 19.08.2026 08:06:07

WhatsWrongAndWhy/CVE-2021-3156

Public PoCSource updated: 21.07.2026 18:52:00

CVE-2021-3156 (Baron Samedit) Report and Research

Public PoCSource updated: 28.07.2026 19:19:47

Exploitation and mitigation analysis of CVE-2021-3156 heap-based buffer overflow in sudo

Public PoCSource updated: 17.06.2026 10:30:12

POC for CVE-2021-3156 - Heap-based buffer overflow in sudo

Public PoCSource updated: 26.03.2026 15:24:18

Red Team exploitation of CVE-2021-3156 (Baron Samedit) – Heap Buffer Overflow in Sudo leading to Local Privilege Escalation on Ubuntu 20.04

Public PoCSource updated: 18.03.2026 12:09:52

A simple Docker lab and Exploit setup for CVE-2021-3156 - "Baron Samedit".

Public PoCSource updated: 13.07.2026 01:53:36

fixed version

Public PoCSource updated: 02.06.2026 02:01:33

Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (1)

Exploit referenceSource updated: 03.02.2021 00:00:00

Sudo 1.9.5p1 - 'Baron Samedit ' Heap-Based Buffer Overflow Privilege Escalation (2)

Exploit referenceSource updated: 03.02.2021 00:00:00

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-3156"