Sudoedit CVE-2021-3156 Baron Samedit heap overflow exploitation on Linux

ills3c Intel&Coffee@Ills3C

•updated yesterday•0•0•0

Detects exploitation attempts against CVE-2021-3156 (Baron Samedit) involving the sudoedit command invoked with the shell-mode flag (-s) and a trailing backslash argument, which is a known trigger for the heap overflow vulnerability in sudo.