HACKINTOSH.ORG | Macintosh discussion forums

macOS Big Sur 11.2.1 Fixes Root Access Sudo Bug

The macOS Big Sur (https://www.macrumors.com/roundup/macos-big-sur/) 11.2.1 update that Apple released today (https://www.macrumors.com/2021/02/09/apple-releases-macos-big-sur-11-2-1/) fixes a sudo security vulnerability that could allow an attacker to gain root access to a Mac.





(https://images.macrumors.com/article-new/2021/02/sudo-bug-macos.jpg)


According to an Apple security support document (https://support.apple.com/en-us/HT212177), the bug, CVE-2021-3156, was addressed in the update by updating to sudo version 1.9.5p2. Apple has also fixed the bug in Supplemental Updates made available for macOS Catalina (https://www.macrumors.com/roundup/macos-10-15/) 10.15.7 and macOS Mojave 10.14.6.





The updates also include fixes for two bugs that could allow an app to execute arbitrary code with kernel privileges.





Discovered last week (https://www.macrumors.com/2021/02/03/root-access-sudo-bug-found-to-affect-macos/), the vulnerability triggers a "heap overflow" in sudo that changes the current user's privileges to enable root-level access, giving an attacker access to the entire system.



This article, "macOS Big Sur 11.2.1 Fixes Root Access Sudo Bug (https://www.macrumors.com/2021/02/09/macos-big-sur-11-2-1-fixes-root-access-sudo-bug/)" first appeared on MacRumors.com (https://www.macrumors.com)

Discuss this article (https://forums.macrumors.com/threads/macos-big-sur-11-2-1-fixes-root-access-sudo-bug.2284014/) in our forums

<div class="feedflare">
<img src="http://feeds.feedburner.com/~ff/MacRumors-Front?d=yIl2AUoC8zA" border="0"></img> (http://feeds.macrumors.com/~ff/MacRumors-Front?a=wQxrGlQUABA:qHQ4BZhdRfA:yIl2AUoC8zA) <img src="http://feeds.feedburner.com/~ff/MacRumors-Front?d=6W8y8wAjSf4" border="0"></img> (http://feeds.macrumors.com/~ff/MacRumors-Front?a=wQxrGlQUABA:qHQ4BZhdRfA:6W8y8wAjSf4) <img src="http://feeds.feedburner.com/~ff/MacRumors-Front?d=qj6IDK7rITs" border="0"></img> (http://feeds.macrumors.com/~ff/MacRumors-Front?a=wQxrGlQUABA:qHQ4BZhdRfA:qj6IDK7rITs)
</div><img src="http://feeds.feedburner.com/~r/MacRumors-Front/~4/wQxrGlQUABA" height="1" width="1" alt=""/>

Source: macOS Big Sur 11.2.1 Fixes Root Access Sudo Bug (https://www.macrumors.com/2021/02/09/macos-big-sur-11-2-1-fixes-root-access-sudo-bug/)