Sudo Heap-Based Buffer Overflow Vulnerability — CVE-2021-3156

jeff3820 · Feb 7, 2021, 12:45 AM

Will the Sudo vulnerability be patched in the version of FreeBSD used by Pfsense 2.4.5p1 or hopefully the upcoming version 2.5?

stephenw10 · Feb 8, 2021, 12:14 AM

sudo is not installed by default. But, yes, it will be the patched version in 2.5:

[2.5.0-DEVELOPMENT][admin@25dev.stevew.lan]/root: pkg search sudo
pfSense-pkg-sudo-0.3_6         pfSense package sudo
sudo-1.9.5p2                   Allow others to run commands as root

Steve