For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Barny_Riches's avatar
Barny_Riches
Icon for Altostratus rankAltostratus
Jan 27, 2021

CVE-2021-3156 | SUDO Heap-based Buffer Overflow

Are any of the BIG-IP versions affected by the recent SUDO vulnerability announcement? I have checked our F5 estate and I don't believe that the SUDO package is installed or used, but I just want to ...
BIG-IP
security
Marcel_Vanko's avatar
Marcel_Vanko
Icon for Nimbostratus rankNimbostratus
Jan 28, 2021

I have tried it on F5 v12.1.5.2

testuser@F5v12-1-5-2:~$ sudoedit -s /
sudoedit: /: not a regular file
testuser@F5v12-1-5-2:~$

Test on Linux vm before and after patch

testuser@vm-not-patched:~$ sudoedit -s /
sudoedit: /: not a regular file
testuser@vm-not-patched:~$ 
 
testuser@vm-patched:~$ sudoedit -s /
usage: sudoedit [-AknS] [-r role] [-t type] [-C num] [-g group] [-h host] [-p prompt] [-T timeout] [-u user] file ...
testuser@vm-patched:~$