CVE-2021-23239
The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path.
- Affected products
- Alt Linux, Astra Linux, Centos, Linuxmint, Red Hat, Rocky Linux, Sudo, Suse
- Sudo Project Sudo
- < 1.8.32, 1.9.5
- Fix
- Available
- CVSS 3.1
- 2.5 LOW
- EPSS
- 1.0% (60th percentile)
- Weakness
- CWE-59
- NVD status
- Modified
- Published
- 2021-01-12
CVE-2021-23239 at NVD
No indexed exploits for CVE-2021-23239 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2021-23239 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.