below is the output from sudoedit -s / command , server is at 7100-05-05-1939 version, please let me know if sudo is vulnerable or not.

# sudoedit -s /
sudoedit: /opt/quest/lib64/libsudo_vas.so: A file or directory in the path name does not exist.
sudoedit: /: not a regular file



------------------------------
Cenovus AIX
------------------------------

Here is a blog that describe about vulnerability.
https://blog.aquasec.com/cve-2021-3156-sudo-vulnerability-allows-root-privileges

Summary from blog if you run following command and get segmentation fault then you are vulnerable, if you get usage error you are not. 

# sudoedit -s '\' `perl -e 'print "A" x 65536'`

​

------------------------------
SANKET RATHI
------------------------------

Original Message:
Sent: Fri February 26, 2021 08:12 AM
From: Cenovus AIX
Subject: CVE-2021-3156 Sudo Vulnerability on Aix servers

below is the output from sudoedit -s / command , server is at 7100-05-05-1939 version, please let me know if sudo is vulnerable or not.

# sudoedit -s /
sudoedit: /opt/quest/lib64/libsudo_vas.so: A file or directory in the path name does not exist.
sudoedit: /: not a regular file



------------------------------
Cenovus AIX
------------------------------