Fixing sudo vulnerability CVE-2021–3156

In this post, we’ll see how to check whether our sudo version is affected by CVE-2021–3156 and how to fix it.

You can check your sudo version with sudo -V and confirm whether your sudo version is affected by this vulnerability:

As per https://sysdig.com/blog/cve-2021-3156-sudo-falco/, this vulnerability affects following sudo versions:

• All legacy versions from 1.8.2 to 1.8.31p2
• All stable versions from 1.9.0 to 1.9.5p1