3 ms·

Can it be link to CVE-2021-3156 ? 10 years old sudo vulnerability.

• Kwpolska 6y ago
  No, it can’t. To exploit this vulnerability, you need the ability to run shell commands/arbitrary code on the system. Google Cloud SQL only lets you run SQL, and I would expect the servers to be locked down pretty heavily when it comes to non-database stuff.
  • john37386 6y ago
    Thanks for the info. It must be a coincidence then. The timing looked like there was a possibility
    • Kwpolska 6y ago
      The vulnerability was announced on Tuesday. And vulnerabilities typically don’t cause unplanned outages like this.
  • js4ever 6y ago
    Or maybe it can! Dropping a shell in Cloud SQL: https://news.ycombinator.com/item?id=24216009 https://news.ycombinator.com/item?id=24216009