Apple fixes SUDO root privilege escalation flaw in macOS

[Karlston]

Apple fixes SUDO root privilege escalation flaw in macOS

 

Apple has fixed a sudo vulnerability in macOS Big Sur, Catalina, and Mojave, allowing any local user to gain root-level privileges.

 

Last month, security researchers at Qualys disclosed the SUDO CVE-2021-3156 vulnerability, aka Baron Samedit, that allowed them to gain root privileges on multiple Linux distributions, including Debian, Ubuntu, and Fedora 33.

 

The sudo contributors fixed the vulnerability before the researchers disclosed it. However, Matthew Hickey (Hacker Fantastic), the co-founder of Hacker House, discovered that the vulnerability still affected a fully patched macOS Big Sur installation.

 

 

Today, Apple released security updates for macOS Big Sur 11.2, macOS Catalina 10.15.7, and macOS Mojave 10.14.6 that fix the sudo vulnerability.

 

Apple patch notes

In addition to the sudo fix, today's updates also fix two arbitrary code execution vulnerabilities in Intel graphics drivers.

 

Due to the severity of the vulnerabilities, it is strongly advised that macOS users install the security updates as soon as possible.

 

 

Apple fixes SUDO root privilege escalation flaw in macOS